And that's how quishing works

Some scammers print fake QR stickers and slap them over real ones - on posters, signs, menus, or even parking meters.
If the code looks freshly stuck on, crooked, bubbled, or doesn’t match the background design, it’s probably a trap. 

Scammers weaponize our curiosity. QR codes are designed to be scanned reflexively, and that instinct - acting before considering where the link leads - is precisely what makes quishing effective.  

Glance for tampering or mismatched materials. If the code looks out of place or suspiciously new, skip it. 

 When you scan, your phone shows the link before opening it.
If the domain looks weird, misspelled, or shortened (like bit.ly or tinyurl), back out. 

Legit businesses and agencies pair QR codes with matching branding or URLs.
Lone, unbranded codes? Big red flag. 

A genuine QR won’t ask for your login, password, or banking details.
If it does, that’s not curiosity - it’s a con. 

Finally, for trusted sites (like Kumiho ^_^), save the link once and visit directly later - not through random QR codes.