Skip to content
JatzoCyber Security
← All modules

Workplace module

QR code phishing

One scan moves the attack onto your phone, away from work protections. Take a route it cannot follow.

Why a QR code moves an attack onto a phone your organisation cannot see, and how to read where it really leads. Built on the codes that reach small firms: PDFs to sign, stickers on car park machines, fake Companies House identity checks and parking fines.

  • QR codes in PDF attachments
  • Stickers on car park machines
  • Fake sign-in pages on your phone
  • Fake Companies House identity checks
  • Fake parking fine notices

You will be able to

  • Treat a QR code as a request to leave your work protections behind.
  • Read the part of an address that decides where you land, even on a phone.
  • Spot a tampered or fake code, and act fast if you have already used one.

The lessons

01The scan that changes deviceExplain why a QR code in a work message is there to move you onto your phone.About 10 minutes · 4 activities and a decisionLocked
02What a filter can and cannot do with a codeKnow how QR phishing reaches you now, and why a quiet arrival in your inbox proves nothing.About 10 minutes · 4 activities and a decisionLocked
03Reading an address on a small screenFind the part of a web address that decides where you land, even on a phone.About 9 minutes · 5 activities and a decisionLocked
04The sticker over the real codeRecognise a tampered code on a machine or a notice, and pay another way.About 10 minutes · 4 activities and a decisionLocked
05What the page does once you are on itRecognise what a page opened from a code is after, and why a padlock and your own address prove nothing.About 10 minutes · 4 activities and a decisionLocked
06What to do instead, and what to do afterReach the real service without the code, and act in the first minutes if you have already used one.About 9 minutes · 4 activities and a decisionLocked

Then the assessment

Finish the six lessons by getting each one's final decision right, then answer eight new questions. A score of at least 80% earns a personal completion record. You can retake it, with an explanation for every answer; it is a learning exercise, not a timed exam or an accredited qualification.