Skip to content
fishi

Glossary

Quishing (QR code phishing)

Phishing that hides the malicious link inside a QR code, often in an email image, a letter or a sticker.

Quishing replaces the clickable link with a QR code: "scan to confirm your account", "scan to pay your parking fine". Scanning it with your phone moves you away from your computer's protections and email filters, which usually can't read the code. The QR code then opens a fake login or payment page.

Treat QR codes in unexpected emails like links: don't scan them. Fishi reads QR codes in email images and checks where they lead. Forward the email to check@fishi.email.