Don’t Scan That! Spotting QR Code Phishing (Quishing) QR codes are everywhere, and so are the scammers using them. Quishing (QR code phishing) hides malicious links behind a square that your email filter can’t read, and your eyes can’t verify. In this short video, you’ll learn how quishing attacks work, the red flags to watch for, and what to do before you scan.
In this video:
What quishing is and why attackers love it
Real-world examples: fake parking meters, “package delivery” flyers, and urgent IT or HR emails
Five red flags: unexpected codes, urgency, stickers placed over existing codes, requests to log in, and codes in emails that claim to be from your own company
The safe-scan checklist: preview the URL, verify through a trusted channel, and never enter credentials after scanning
How to report a suspicious QR code
Key takeaway: If you wouldn’t click an unknown link, don’t scan an unknown code. When in doubt, report it.
Who it’s for: All employees. No technical background needed.
Length: [X] minutes
Tags/keywords: quishing, QR code phishing, phishing awareness, security awareness training, cybersecurity training, social engineering, QR code scams
Shorter version (for an email or LMS blurb):
QR codes can hide phishing links that bypass email security. Learn how quishing works, how to spot the warning signs, and what to do before you scan. Two minutes that could protect your account and your company.
I can adjust the tone (more playful or more formal), match a specific length, or tailor it to a company or industry if you tell me more.