Scams
Quishing (QR code phishing)
In Turkish: Quishing (QR kod ile oltalama)
A fake QR code, often a sticker over a real one, that sends you to a page built to steal logins or payments.
A QR code is just a web address you cannot read. Scammers print their own codes and stick them on parking machines, posters, menus or letters, or send them by email, so you scan first and judge later.
Email filters often cannot read the text inside an image, which is one reason attackers like QR codes. After scanning, always read the address your phone shows before you type anything.
What to do
- Pay through the operator's own app or the machine instead of a loose QR sticker.
- Read the full address after scanning; leave if it does not match the organisation.
- Check a link with the Link Check tool when you are unsure.
Related terms
Learn it in the Academy
Try it
Free tools that put this to use.
- Link checker
Paste a link from a text, email or ad. We open it for you and say what it really does.