A different way to hide a link
QR phishing puts a deceptive destination behind a code. The code can appear in an email, a printed notice, or another message, where the destination may not be obvious until it is scanned.
Consider the setting and request
An unexpected QR code asking for a sign-in or payment deserves attention. A code can move a workflow from a work computer to a personal phone, where the context and security controls may differ.
Preview is a chance to pause
If your device shows the destination before opening it, read that information carefully. For sensitive requests, use a known official route and confirm why the action is needed. Do not treat a QR code as a trust mark.