# How to protect yourself from QR code scams Recognize quishing attacks and safeguard your data. - **Source:** [Latest news](https://brifing.si/source/77d15218-219f-472d-bf40-31b5646d2942) - **Published:** 2026-07-13 - **Original article:** - **On Brifing:** https://brifing.si/s/11e1058b-95fb-4b7a-a5e8-4a3fbe182f5f ## What is quishing? Quishing is a fraud method that uses malicious links hidden in QR codes to bypass traditional phishing filters. Attackers place QR codes in emails or physical materials to deceive victims. This technique can circumvent security measures like multi-factor authentication (MFA). ## How do attacks work? Attackers impersonate trusted organizations like banks or social media platforms to send QR codes. When victims scan the code, they are redirected to a fake website and prompted to enter credentials. These details are stolen, leading to account takeover and data theft. ## Physical QR code dangers QR code scams aren't limited to digital spaces. Posters, business cards, or stickers on street lamps can also pose risks. These codes direct victims to malicious websites, resulting in the theft of personal data. ## Google and Microsoft warn Google and Microsoft reported a 25% increase in quishing attacks recently. QR codes hidden in email attachments can bypass traditional security measures. Attackers exploit victims' curiosity or sense of urgency to deceive them. ## How to protect yourself? Verify the source before scanning unexpected QR codes. For messages claiming to be from banks or other institutions, visit official websites or apps directly. Manually type links instead of scanning QR codes when in doubt. ## Stay skeptical Treat QR codes like suspicious email links. Avoid scanning codes from untrusted sources and be cautious of physical QR codes in public spaces. These attacks, designed to bypass security, can only be thwarted by vigilant users. ## Sources covering this story - https://www.zdnet.com/article/how-to-spot-quishing-qr-code-scams/ — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._