Cybersecurity agencies warn of rising QR code phishing scams

Cybersecurity authorities are warning of rising fraud involving manipulated QR codes, a technique known as ‘quishing’. This method combines QR codes with phishing to redirect victims to fraudulent websites designed to steal passwords, banking details, or personal identity.

In Argentina, the rapid adoption of QR payments—which saw an 83% increase in 2025—has created new vulnerabilities. The BA-CSIRT notes that the primary risk occurs after scanning, when users enter sensitive data or download files. The Central Bank reported that interoperable QR transfers reached 92.1 million in January, totaling 2.1 trillion pesos.

In Spain, the Cybersecurity Agency of Catalonia has identified a specific scam involving unsolicited packages. Victims receive a package containing a QR code promising a gift; scanning it leads to a web form requesting personal or financial information. Authorities advise checking the sender, looking for poor print quality on codes, and verifying that websites use secure connections. If targeted, victims should contact their banks immediately and report the incident to law enforcement.