QR Code Scams: How to Stay Safe
Definition: QR code scams (quishing) use malicious QR codes to redirect victims to phishing sites, malware downloads, or fraudulent payment pages.
As QR code usage has grown, so have QR-based scams. "Quishing" (QR phishing) involves placing fake QR codes over legitimate ones — on parking meters, restaurant tables, or public signage. Victims scan the malicious code and are directed to convincing phishing sites that steal credentials or payment info. Always verify the URL preview before taking action, avoid QR codes placed as stickers over other codes, and never enter passwords or payment info from an unexpected QR scan.
Key points
- Quishing = QR code + phishing
- Fake QR stickers over legitimate codes
- Always check URL preview before tapping
- Never enter passwords from QR scans
- Be suspicious of unsolicited QR codes
- Report suspicious QR codes to the venue
Frequently asked questions
What is quishing?
Quishing combines "QR" and "phishing." Scammers create QR codes linking to fake websites that mimic legitimate ones to steal login credentials, payment info, or personal data.
How can I tell if a QR code is safe?
Check the URL preview before visiting, verify the domain matches the expected brand, look for signs of QR sticker tampering, and never enter sensitive info from unexpected QR scans.
Are parking meter QR scams real?
Yes — scammers place fake QR code stickers on parking meters that redirect to fraudulent payment sites. Always use the official parking app or meter directly.
Related terms
liveqr.codes is a free QR code generator. Static codes are free and unlimited with no signup; a one-time $1.99 lifetime upgrade adds unlimited dynamic codes with editable destinations and scan analytics. Download every code as a high-resolution PNG or vector SVG.