Quishing

Phishing that uses a QR code to send you to a fake or harmful page.

How it appears in scam messages

Quishing is phishing via QR codes - a code in an email, poster, or message opens a fake login or payment page. The code hides its destination, so you can't tell where it leads before scanning.

Example only - do not act on it

Example only: Scan this QR code to confirm your details.

Why it matters

You cannot read a QR code by eye, so quishing hides the real destination until it is too late.

Common red flags

Unexpected contact creating urgency or fear
Requests for codes, passwords, payment, or personal details
Links or attachments you did not expect
Sender or domain that does not match the real organisation

Safe next steps

Stop and verify through official channels you find yourself
Never share codes, passwords, or card details from a message
Use the message checker if you are unsure
Report and block the sender

Check a suspicious message

See the red flags in a real message and what to do next.

Check a message

QR code scamA scam that uses a QR code to send you to a fake payment or login page.PhishingPhishing is when a scammer pretends to be a trusted person or organisation to trick you into revealing passwords, codes, or financial details, or into clicking a malicious link.

Related scam messages you can check

Related scam-type hubs

QR code and payment link scams

Related red flags

qr code payment request

Emergency guides

Frequently asked questions

How can I avoid quishing?

Slow down, never act on urgency, and verify through official apps or websites you open yourself. Use the free checker if a message seems off.

What if I have already been affected?

Contact your bank or the relevant provider through official channels, change any exposed passwords from a trusted device, and save evidence. See our recovery guides.