Scams & phishing
QR code (quishing) scams at local stores and parking lots
How malicious QR codes in parking lots and fake posters steal logins — and how Forsyth shoppers can scan more safely.
Updated 2026-07-20 · 4 min read · CyberForsyth
A sticker can be a phishing link
QR codes are everywhere: restaurant menus, parking payment signs, event check-ins. Attackers place fake stickers over real codes so your phone opens a phishing site that looks like a payment portal or login page.
Safer scanning habits
- Look for tampering — a sticker on top of a sign is a clue
- Read the URL preview before opening
- Prefer typing a known parking app yourself
- Do not enter passwords after a random outdoor scan
- Keep phone OS and browsers updated
Work and school flyers
If a flyer asks you to “verify your account” via QR for payroll or student info, verify through official channels first. Quishing is just phishing with an extra step.
If you already scanned and logged in
Change that password from another device, enable MFA, and monitor the account. Treat it like any other phishing event.
Need hands-on help?
Contact CyberForsyth if a malicious QR led to account takeover.
Sources
Public resources referenced in this guide. We are not affiliated with these organizations unless stated elsewhere.