Safety
QR Code Scams (Quishing): How to Spot and Avoid Them
How QR code phishing works, the warning signs, how businesses protect customers from fake stickers, and what to do if you scanned a bad code.
"Quishing" is phishing through QR codes. Scammers stick fake codes over real ones on parking meters, posters and restaurant tables, or send them by email, so victims land on a fake payment or login page.
Warning signs
- A sticker placed over another code, or one that looks freshly added.
- A link preview that doesn't match the business name.
- A page asking for card details or passwords right after scanning.
- Urgency: "Pay now to avoid a fine".
How to scan safely
- Read the link preview your camera shows before opening it.
- Type known payment sites yourself instead of scanning codes on street furniture.
- Never enter passwords on a page you reached from an unexpected QR code in an email.
How businesses can protect customers
- Use branded codes with your logo and colors, so a plain fake sticker stands out.
- Print codes directly on materials instead of using stickers.
- Point codes to your own domain so customers see a name they know.
- Check public codes regularly for tampering.
If you scanned a bad code
Close the page. If you entered card details, call your bank immediately. If you entered a password, change it and turn on two-factor authentication.
Make it yourself in under a minute
Open the generator
The QR code generator with logo opens with the right content type already selected.
Fill in the content
Enter the link, network, contact or message. The preview updates instantly.
Brand it (optional)
Add your logo and colors. The scan test checks every change.
Download and print
Black codes download free as PNG. Use SVG for print with a paid plan.
