Recommended Free Tools
QR code phishing, or quishing, is phishing that uses a QR code to hide a deceptive or harmful destination. After scanning, you may be sent to a fake sign-in or payment page, asked to reveal personal or financial details, or prompted to download something malicious. A QR code is not dangerous by itself; the risk lies in where it sends you and what the page asks you to do.
What does quishing mean?
Quishing is a blend of “QR code” and “phishing.” It uses a QR code as the delivery method for a phishing attempt: the code directs a person to a website or action intended to steal information, money, or account access. The United States Postal Inspection Service describes quishing as a QR-code-based phishing scam in its Quishing guidance.
QR codes can encode information or a web address. Criminals exploit the fact that a printed or embedded code does not show its destination as plainly as a readable link. Microsoft explains that QR codes in messages can move the interaction from email to a phone, where a destination may be harder to inspect and some automated email protections may not apply in the same way. See Microsoft’s phishing trends and techniques guidance.
How does QR code phishing work?
- A pretext creates a reason to scan. A message may claim that a delivery failed, an account has a problem, or suspicious activity requires an urgent password change.
- The code conceals the destination. It may appear in an email image or attachment, a text message, a document, an unexpected package, or on a sticker placed over a legitimate public code.
- Scanning takes you to a site or action. A phone camera may display a URL or offer to open it. The code itself is only a carrier; the destination and the action it prompts are what matter.
- The page attempts to defraud you. A counterfeit sign-in page can collect credentials; a false payment page can divert money; a malicious site or download can put data or a device at risk.
The Federal Trade Commission’s consumer alert describes QR-code messages that impersonate delivery or account notices. The FBI’s warning about tampered QR codes also explains how fraudulent stickers at public payment locations can redirect people trying to pay.
#1 Best Overall
- Continuous Usage All Day: The EY-H2 USB barcode scanner is designed to always be ready for the next scan, which significantly reduces downtime and repair costs; it shortens checkout lines, improves customer service, and boosts business productivity
- Plug and Play: Eyoyo wired barcode scanner is connected via a USB cable, with no need to install any driver or software; It offers effortless connection and is compatible with Windows, Mac, Android, and Linux; Seamlessly works with Quickbook, Word, Excel, Novell, and all common software
- Supports Multiple 1D/2D Barcodes: Eyoyo QR code scanner scan with most 1D 2D barcodes with ease; 1D Barcodes: EAN, UPC, Code 39, Code 93, Code 128, UCC/EAN 128, Codabar, Interleaved 2 of 5, ITF-6, ITF-14, ISBN, ISSN, MSI-Plessey, GS1 Databar, Code 11, Industrial 25, Matrix 2 of 5, etc. 2D Barcodes: QR, DataMatrix, PDF417, and so on
- Supports Screen Scanning: The Eyoyo 2D scanner is capable of reading barcodes from smartphone screens, such as mobile coupons, digital wallets, and digital loyalty cards; Before scanning, simply turn your screen brightness to the maximum
- Sturdy Anti-Shock and Durable Design: The Eyoyo 2D barcode scanner features an ergonomic design made of high-quality ABS, enabling it to withstand repeated drops from 5 ft/1.5 m high onto the concrete ground; The durable plastic material ensures a long service life
Where might you encounter a quishing attempt?
| Channel | Typical setup | What to check |
|---|---|---|
| Email or document | A message or attachment includes a QR code and urges you to sign in or resolve an account issue. | Verify the request through the organization’s known website or phone number, not the code. |
| Text message | A text claims that a package, account, or payment needs immediate attention. | Do not let urgency push you into scanning; contact the organization using details you already trust. |
| Public payment code | A sticker may cover a genuine QR code on a parking meter or another payment location. | Look for signs of tampering and confirm the payment instructions through the official operator. |
| Unexpected package | A code in an unsolicited parcel may request personal or financial information or prompt a download. | Avoid scanning codes from unknown origins. The FBI warned about this scheme in a July 31, 2025 public service announcement, describing it as a variation of a brushing scam. |
| Targeted work-related message | A QR code can also appear in a tailored spear-phishing campaign aimed at an organization. | Judge the specific message and destination rather than assuming every QR scam has the same perpetrator. An FBI FLASH dated January 8, 2026 reported Kimsuky use of QR codes in campaigns targeting U.S. entities. |
Can a QR code steal your information?
A QR code does not steal information simply by existing or being photographed. It can, however, direct you to a fraudulent page that asks for a password, payment-card details, or other personal information. A destination may also prompt a download or another risky action. Treat the QR code as an unverified link: inspect the destination and decide whether the requested action makes sense before proceeding.
How can you recognize and avoid quishing?
- Be wary of unexpected urgency. Do not scan a code in an unsolicited message that threatens account trouble, a missed delivery, or another consequence unless you act immediately. Verify the claim independently.
- Preview the URL before opening it. Check the full spelling and domain displayed by your camera app. Watch for added, swapped, or lookalike characters, and do not continue if the address is unfamiliar or inconsistent with the organization.
- Inspect physical codes. At a parking meter or other public location, check whether a sticker appears to cover another code and whether the payment instructions seem unusual.
- Use a trusted route instead. Type the organization’s known web address yourself or use a phone number from a trusted source, rather than relying on contact details in the suspicious message.
- Maintain account and device protections. Keep your phone’s operating system current, use strong unique passwords, and enable multifactor authentication where available.
These precautions align with the FTC’s consumer guidance on QR-code scams.
Quick Recap
Best Value
- 【IP66 Waterproof Dustproof Mini Pocket 2D Scanner】Just bring this scanner with you. Anytime you want to collect data, just connect it with your device via Bluetooth or use the storage mode. 【Package Includes】Barcode Scanner x1, USB Cable x1, Dongle x1, User Manual x1.
- 【Waterproof Dustproof Silicone Port Plug】Newly designed waterproof and dustproof silicone port plug on marketplace, it enables better performance of the scanner in every working conditions. The silicone button on the scanner body enables every soft and smooth scanning experience.
- 【3-in-1 Connection Ways】This scanner works with Bluetooth, 2.4GHz wireless and USB 2.0 wired mode. The transmission distance can be 656ft in barrier free environment and 98 ft in an environment with obstacles using a 2.4G USB dongle. In addition, it is also compatible with various operating systems, such as windows 11/10/8/7/xp, Mac OS, iOS, android, linux.(Note: Not Compatible with Square)
- 【Vibration Alert】: When you need a quiet working environment, just turn the volume off and the vibration function will let you know if a barcode is detected.
- 【1D 2D QR Scanner】:Supports Both Digital and Printed 1D 2D QR Bar Code Symbologies: 1D Decode Capability: Codabar, Code 11, Code93, MSI, Code 128, UCC/EAN-128, Code 39, EAN-8, EAN-13, UPC-A, ISBN, Industrial 25, Interleaved 25, Standard 25, 2/5 Matrix 2D Decode Capability: QR, PDF417, Data Matrix, Aztec code, Maxi Code.
Rank #4
- 【Unique Designed Screen Setting】It allows you to customize the screen display according to your preferences. With this innovative feature, you can easily set the language, adjust volume settings, select connection options, and view stored and total barcodes. Experience unparalleled convenience and flexibility as you personalize the settings of your Tera HW0009 to suit your specific needs. 【Package Includes: Barcode Scanner x1, Charging Cradle x1, Charging Cable x1, User Manual x1】
- 【Superior Global CMOS Imaging Scanning】This advanced scanner excels in fast and accurate reading of both ordinary and high-density barcodes, including challenging formats like PDF417 found on driver's licenses. Its exceptional performance effortlessly handles various scanning scenarios, including underwater scanning, reading barcodes on silver paper, reflective materials, and more.
- 【Charging Cradle & 2500mAh Large Battery】Designed with a convenient charging cradle, the HW0009 barcode scanner allows you to easily charge it whenever it's not in use. In addition, the scanner itself is equipped with a powerful 2500mAh battery, ensuring seamless all-day operation without the need for frequent charging.
- 【3-in-1 Connections & Widely Compatible】 Tera HW0009 wireless barcode scanner can work with bluetooth & 2.4G wireless & usb wired. The transmission distance can be 328ft in barrier free environment and 114ft in obstacles environment using 2.4G USB dongle. It can be connected with a variety of devices, such as smartphones, computers, POS, tablets. In addition, it is also compatible with various operating systems, such as windows 11/10/8/7/xp, Mac OS, iOS, android, linux.
- 【1D 2D QR code Programmable】2D: QR code, Data Matrix, PDF417(including PDF417 on driver’s license), Aztec, Maxicode, Micro QR, Micro PDF417; 1D: UPC/EAN, Code 128/EAN128, GS1-128, ISBT-128, Standard 2 of 5, Matrix 2 of 5, Code 39, Code 32, Code 93, Code 11, Codabar, PLESSEY, MSI, GSI Databar, ITF-14, GS1.
Rank #3
- 【Battery Level Indicator and 2200mAh Capacity】Larger battery enables longer continuous usage and twice the stand-by time of others. With the unique battery indicator light showing the remaining battery level, no more Low Battery Anxiety.
- 【Ergonomic Design】 The curved handle is extended and thickened, tailor-made for North America customers. Specially designed smooth and flat trigger for better grip. 【Package Includes】Barcode Scanner x1, USB Cable x1, Dongle x1, User Manual x1
- 【Anti-Shock Silicone】 The orange anti-shock silicone protective cover can avoid scratches and friction while falling from the height of 6.56 feet. IP54 technology protects the wireless barcode scanner from dust.
- 【2.4 GHz Wireless + USB 2.0 Wired Connection】 Plug and play with the USB receiver or the USB cable, no driver installation needed. Easy and quick to set up. Wireless transmission distance reaches up to 328 ft. in barrier free environment.
- 【Digital and Printed 1D 2D QR Bar Code Symbologies】1D: Codabar, Code 11, Code93, MSI, Code 128, UCC/EAN-128, Code 39, EAN-8, EAN-13, UPC-A, ISBN, Industrial 25, Interleaved 25, Standard25, Matrix 2D: QR, DataMatrix, PDF417, Aztec, Hanxin, Micro PDF417. (Note: Not compatible with Square.)
Rank #2
- 【Battery Level Indicator and 2200mAh Capacity】Larger battery enables longer continuous usage and twice the stand-by time of others. With the unique battery indicator light showing the remaining battery level, no more Low Battery Anxiety.
- 【Ergonomic Design】 The curved handle is extended and thickened, tailor-made for North America customers. Specially designed smooth and flat trigger for better grip. 【Package Includes】Barcode Scanner x1, USB Cable x1, Dongle x1, User Manual x1.
- 【Anti-Shock Silicone】 The orange anti-shock silicone protective cover can avoid scratches and friction while falling from the height of 6.56 feet. IP54 technology protects the wireless barcode scanner from dust.
- 【2.4 GHz Wireless plus USB 2.0 Wired Connection】 Plug and play with the USB receiver or the USB cable, no driver installation needed. Easy and quick to set up. Wireless transmission distance reaches up to 328 ft. in barrier free environment.
- 【Digital and Printed 1D 2D QR Bar Code Symbologies】1D: Codabar, Code 11, Code93, MSI, Code 128, UCC/EAN-128, Code 39, EAN-8, EAN-13, UPC-A, ISBN, Industrial 25, Interleaved 25, Standard25, Matrix 2D: QR, DataMatrix, Aztec, Hanxin, Micro PDF417. (Note: Not compatible with Square.)
What should you do if you scanned a suspicious QR code?
- If you only opened the page, close it. Do not enter information, make a payment, download a file, or grant permissions. A scan alone does not establish that your information was stolen.
- If you entered a password, secure the account. Go to the service using its known official website or app, change the password, and update it anywhere else you reused it. Turn on multifactor authentication if available.
- If you shared payment or financial details, contact the relevant provider. Use the phone number or official site you already trust to ask what protective steps are appropriate.
- Report the incident through an appropriate official channel. Consumer fraud can be reported to the FTC at ReportFraud.ftc.gov. The FBI directs people dealing with suspicious QR-code package schemes to report them to the Internet Crime Complaint Center (IC3); see its package-scam warning.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

