Angvlar Security Awareness
QR phishing and safe scanning
Scan QR codes safely and recognise when a physical or digital code may lead to a deceptive destination.
Why this matters
QR codes hide the destination until scanned. They can be replaced on posters, inserted into invoices or used to move users from a protected work device to a less protected phone.
By the end of this lesson
- Recognise the main warning signs
- Choose a safe verification method
- Know when and how to report the situation
What to notice
- QR code requests a login or payment
- Sticker appears placed over another code
- No clear organisation or destination
- Unexpected QR in email attachment
- Shortened or unfamiliar URL after scanning
- Pressure to scan immediately
What to do
- Inspect the physical code for tampering
- Preview the destination before opening
- Use the official app or website instead
- Avoid entering credentials after an unexpected scan
- Report suspicious codes and their location
- Keep mobile devices updated
Frequently asked questions
Why are QR codes risky?
They hide the destination and often move activity to mobile devices.
Should I scan a code to find out whether it is safe?
Only if you can preview the URL without opening it and the context is trusted.
What if a public poster looks altered?
Do not scan it; report the location.