Watch out for quishing before you scan that QR code

No matter where you travel, you’re bound to come across the now easily recognisable symbol: the QR Code. This kaleidoscopic square of code has quickly become part of our payment options, with everything from restaurant bills to hotel accommodations paid for using this quick scan. They’re fast, contactless and convenient, especially when you’re splitting a bill or trying to avoid waiting for a card machine.

But warnings are being issued about increasing scams sneakily being hidden behind this convenient payment option in the form of quishing. According to cybersecurity experts at McAfee, quishing is a form of phishing that uses QR codes instead of clickable links to trick people into handing over sensitive information.

In a recent incident reported by IOL, one South African, Malische Pienaar, is contesting a massive R270,000 loss linked to a QR code scam. And this is just one of many examples. 

Basically, instead of clicking a suspicious link, you’re being asked to scan one. Once scanned, a fake QR code can lead to:

• Fake payment pages or invoices
• Login screens designed to steal passwords
• Malware downloads
• Fraudulent “customer support” portals
• Subscription traps that quietly charge your card 

The problem? QR codes don’t show you where they lead before you scan. That removes one of the biggest red flags people are used to looking out for. As reported by Daily Maverick, QR scams are becoming more common because they’re simple to deploy and difficult to spot in real-world settings.

Think about how often you now scan a code without hesitation:

• Restaurant menus
• Parking payments
• Event tickets
• WiFi access
• Retail promotions 

Common QR scams to watch for 

1. Fake payment codes: Stickers placed over parking meters or tills redirect you to fake payment pages.
2. Menu swaps in restaurants and bars: You scan a “menu” but land on a phishing page or download prompt.
3. Fake delivery alerts: Missed parcel notices with QR codes urging you to reschedule.
4. Account verification scams: Codes claiming your bank or streaming account needs urgent action.
5. Fake discounts and rewards: Offers that quietly sign you up for recurring charges. 

Safety tips when scanning

You don’t need to stop using QR codes, just slow down a little. Check before you scan: 

• Is the QR code a sticker placed over another one?
• Does it look tampered with or poorly printed?
• Is it in an unusual or suspicious location?
• Can you preview the link before opening it?

Convenience is great… but caution is better! Double-check before making payments when you travel.

📍 The best things to do in Durban
😋 The best restaurants in Durban
🏨 The best hotels in Durban
🛏️ Where to stay in Durban