Human manipulation
Quishing
QR-code phishing
A QR code that leads to a fake website or triggers an unsafe action on a phone.
Fiche de sensibilisationPrête à diffuser à vos équipes ou clients
MIGHT YOU BE AFFECTED?
Turn knowledge into action.
How does this work?
The QR code hides the destination and can bypass the scrutiny usually given to ordinary links.
REAL-WORLD EXAMPLE
« A fake QR code is stuck over a payment terminal code or inserted into an invoice. »
Typical sequence
- 1Replace or distribute a QR code
- 2Redirect to a lookalike page
- 3Steal credentials or payment details
Warning signs
- A sticker placed over another code
- An unusual address after scanning
- An unexpected login request
How to protect yourself
- Preview the address
- Check the physical source
- Close the page if in doubt
If you think you are affected
Stop the affected activity, isolate exposed devices or accounts, preserve evidence, revoke suspicious access and contact the appropriate security professional.
Last updated: 6 September 2026