Quishing

 

What is Quishing?

QR code phishing, otherwise known as quishing, is a type of fraud in which fraudsters use harmful QR codes to carry out fraudulent activities. This is how it works:

    • A fraudster sends an email containing a QR code.
    • When you scan the QR code, you might be redirected to a fraudulent website that looks like a legitimate one.
    • The fraudulent website may ask you for sensitive information, like your login credentials.

How can you protect against Quishing?

Here are some helpful tips to remember:

    • Be cautious and avoid scanning QR codes from unknown sources.
    • Always verify the sender’s email address before responding to any email.
    • When scanning a QR code, look at the URL preview of the QR code first. Ensure that:
        • It starts with HTTPS.
        • Doesn’t have misspellings
        • Confirm that it belongs to a trusted domain, and never click on unfamiliar or shortened links!

 

If a QR code directs you to a website asking for personal information, such as login credentials or payment details, be very cautious. By staying informed and vigilant, you can help protect against fraud!