Quishing is phishing delivered through a QR code. A fraudulent code may open a fake login page, trigger an unsafe download, or send you to a payment site controlled by a criminal.

• The code arrives unexpectedly or is paired with urgency or threats.
• It is pasted over a legitimate code in a public place.
• The destination address looks unusual or asks for sensitive details.

• Preview and inspect the web address after scanning before continuing.
• Type addresses manually for sensitive logins and payments.
• Download apps from official app stores rather than QR links.
• Keep devices updated, use multi-factor authentication, and avoid scanning unknown codes.