QR Code Phishing (Quishing)
Category
Text and QR Code
Affects
Residents and businesses
Status
Active
Source
Nevada OEM alert and our blog
A QR code on an email, letter, sticker, parking sign, or text message sends you to a fake login or payment page. Because the link is an image, some email filters miss it, and the scan happens on a personal phone that often lacks company protections. Nevada officials noted QR codes in the March 2026 fake traffic ticket messages.
How it works
- You receive an email or letter that says to scan a code to verify an account, pay a fine, or track a package.
- The code opens a look-alike site that asks you to sign in or pay.
- Stickers placed over real codes on parking meters or menus redirect payments.
Red flags
- An unexpected QR code plus urgency.
- A code stuck over another code on a sign or meter.
- Being asked to sign in after scanning.
What to do
- Preview the link your phone shows before opening it, and prefer typing the official address.
- Never enter credentials or payment details after an unexpected scan.
- Report suspicious codes at work to your IT provider.
Already paid or shared information? See the step-by-step checklist and the list of places to report. You can also report to the FTC or the FBI IC3.
Does your group want a short talk on scams? Request a free community talk.
Posted solely for community awareness. This is not an official government or law enforcement notice, and High Sierra Cyber is not affiliated with any agency named here. Board last updated October 10, 2026. Details, phone numbers, and policies change, so confirm with the official agency before acting. Submitted reports are unverified. General information only, not legal or financial advice.