QR Code Phishing (Quishing) Sandbox
Hackers are slapping fake QR code stickers over real ones in public places. Practice inspecting the URL *before* you open it.
Scenario 1 of 3
The Parking Meter
You are trying to pay for parking. The meter is broken, but there is a sticker slapped over the screen that says "Pay Here via QR Code."
Waiting for scan...
Why is Quishing so dangerous?
Traditional phishing relies on sending you an email. Your email provider (like Gmail or Outlook) has massive supercomputers scanning every incoming link to block the bad ones before they reach your inbox.
A QR code bypasses all security. It is just a physical sticker in the real world. Your phone's camera app does not have a built-in antivirus to check if the link is safe. It is 100% up to you to spot the fake URL before you click "Open in Safari/Chrome".
How to protect yourself:
- • Feel the code: Is it a paper sticker slapped over a permanent metal or plastic sign? Do not scan it.
- • Read the URL carefully: Look for "Homoglyphs" (letters that look similar, like an uppercase 'I' instead of a lowercase 'l').
- • Never log in: If you scan a restaurant menu and it asks you to log into Google or Apple, close it immediately.