Global rise in QR code phishing scams threatens consumers

Law enforcement agencies in Europe, North America and Asia have reported a sharp increase in fraud that exploits QR codes, a tactic dubbed “quishing.” Criminals replace legitimate QR stickers on parking meters, restaurant tables, ticket machines and public information boards with counterfeit codes that direct users to fake websites or malicious downloads. Because the destination is hidden until the code is scanned, victims often assume the technology is safe and provide banking details, passwords or other personal information.

Cybersecurity analysts note that creating a fake QR code requires minimal technical skill, while swapping a genuine sticker can be done in seconds. The scams target everyday services such as contactless parking payments and digital restaurant menus, making them hard to detect and allowing fraud to continue for days before being discovered. The growing prevalence of QR code usage in daily life has therefore opened a new, low‑barrier avenue for cybercriminals worldwide.