SESKStuff Everyone Should Know
SESK: Stuff Everyone Should Know · sesk.info/sec-quishing

What is QR code phishing called, and where might the QR code hide?

Quishing, often inside an image, PDF or Word document.

Start playing free

  1. Vishing, hidden in voicemail
  2. Quishing, hidden in an image, PDF or Word file ✔
  3. Whaling, hidden in a tweet

Why: The QR code puts the web address inside a picture, so you can't read it before you scan. Treat any QR code you did not expect like a suspicious link.

Huh, didn't know that: Microsoft Learn says spear phishing is a targeted attack with highly customized lure content.

The dad joke
Why did the PowerPoint presentation cross the road? To get to the other slide.
Like this card?
Play the game

References

Answer: Quishing, hidden in an image, PDF or Word file. The QR code puts the web address inside a picture, so you can't read it before you scan. Treat any QR code you did not expect like a suspicious link.

  1. Microsoft Learn: Phishing trends learn.microsoft.com/en-us/defender-endpoint/malware/phishing-trends
    QR code phishing, also called quishing, embeds a QR code in an image, PDF, or Word document.
    Checked 2026-10-10.
  2. Microsoft Learn: Phishing trends learn.microsoft.com/en-us/defender-endpoint/malware/phishing-trends
    Spear phishing is a targeted phishing attack that involves highly customized lure content.
    Checked 2026-10-10.
  3. Microsoft Learn: Phishing trends learn.microsoft.com/en-us/defender-endpoint/malware/phishing-trends
    Whaling is a form of phishing directed at high-level or senior executives within specific companies
    Checked 2026-10-10.

Think this answer is wrong? Tap "Challenge this answer" on the card in the game and tell us why.

Test yourself in the game

Security & PrivacyScammers sometimes cover real QR codes on things like what, per the FTC?Security & PrivacyAn unexpected email contains a QR code asking you to sign in. What does the FTC say?Security & PrivacyThere's a QR code sticker on the parking meter. What's the smart move before you pay?

That's stuff everyone should know.