We're hiring — IT Technician, Jacksonville areaView details & apply
← Back to Threats Log
MediumPhishing· Published May 8, 2026

QR Code Phishing ('Quishing') in Email and Parking Lot Notices

Attackers embed malicious QR codes in emails, PDF invoices, and even physical stickers on parking meters or office doors — bypassing traditional link-scanning because victims scan with personal phones outside corporate security controls.

Who is affected

Mobile-heavy workforces, field staff, and businesses that use QR codes for menus, payments, or building access.

Why it matters

Quishing exploits the gap between desktop security and personal phone habits — a growing blind spot for Florida SMBs.

Recommended actions

  • Train employees not to scan unexpected QR codes — type known URLs manually instead.
  • Use mobile device management (MDM) where appropriate for company phones.
  • Report suspicious physical QR stickers to building management or local authorities.
  • Keep email anti-phishing filters updated.

Need help implementing these protections?

ITNS provides managed IT, cybersecurity, and compliance support across Florida. Tell us about your environment — we will help you prioritize what matters most for your team.

Disclaimer: This advisory is for general awareness only and does not constitute legal or compliance advice. Every environment is different — contact ITNS for guidance specific to your business.