WHAT IS QUISHING?

Quishing or QR Code Phishing, is where scammers use fraudulent QR codes to trick victims to fraudulent websites designed to steal sensitive information. QR codes are very common, and their destination URL is hidden until after the code is scanned.

Scammers put these codes in high-traffic or high-trust environments to exploit everyday routines.

Parking Meter Overlays: Fake QR code stickers are often placed over legitimate codes on parking meters, gas pumps, or transit kiosks to redirect payments to the scammer.

Public Transit & Venues: Malicious codes appear on public transport schedules, event posters, or flyers promising discounts or “exclusive content”.

Restaurant Menus: Fraudsters replace or overlay digital menu QR codes with links to spoofed payment pages or malicious downloads.

Delivery Alerts: Fake “missed delivery” notices or door tags include a QR code to “reschedule,” which then harvests credit card details.

Surprise Packages: You receive an unsolicited “gift” with a QR code to “register” it or find out who sent it, which leads to a site that harvests your personal info.

HOW TO PROTECT YOURSELF:

Inspect Before Scanning: If a QR code is on a sticker rather than printed directly on a sign, treat it as suspicious.

Go to the Source Directly: Instead of scanning, manually type the official website address into your browser.

Update Software: Keep your operating system updated to ensure you have the latest security patches against malware.

If you believe you have fallen victim to a quishing scam, immediately notify your bank. If you see something, say something! Report suspicious activity to the Lee County Sheriff’s Office (239-477-1000). Did you know the Lee County Sheriff’s Office provides more than a dozen free crime prevention programs? These sessions cover practical tips to help keep you and your community safe. If you’d like to schedule one for your neighborhood, business, church, or organization, just give us a call at (239) 477-1CRU