QR codes have become a convenient part of everyday life. From restaurant menus to payment systems, they offer quick access to information with a simple scan. However, this convenience has opened the door to a new cyber threat known as Quishing, a term that combines “QR” and “phishing.” Quishing refers to scams where criminals use malicious QR codes to trick people into revealing sensitive information or installing harmful software.

The danger lies in the fact that QR codes themselves are unreadable to the human eye. When you scan one, you trust that it will lead to a legitimate website or app. Fraudsters exploit this trust by placing fake QR codes in public spaces, on posters, or even over genuine codes. Once scanned, these codes can redirect you to a fraudulent website that looks authentic but is designed to steal your bank details or login credentials. In some cases, the link may download malware onto your device, giving criminals access to your personal data.

Quishing attacks often rely on urgency or familiarity. For example, you might see a QR code offering a quick discount, a free coffee, or a fast way to pay for parking. Because these situations feel routine, people rarely stop to question the source. The result can be devastating and include compromised accounts, unauthorised transactions, and even identity theft.

To protect yourself, always think before you scan. Avoid QR codes in random public places or those sent via unsolicited emails or messages. If you need to scan a code for payment or information, verify that it comes from a trusted source. For example, check that the code is part of official signage and not a sticker placed over the original. After scanning, look carefully at the URL before clicking any links. A legitimate website will usually have a secure connection (https) and a domain name you recognise. If something feels off, do not proceed.

Businesses and individuals should also consider using security tools that preview QR code destinations before opening them. Keeping your device’s security software up to date adds another layer of protection against malware.

Quishing may be a new term, but the risk is real. Awareness and caution are key to staying safe. The next time you reach for your phone to scan a QR code, pause and make sure convenience does not come at the cost of your financial security.