Warning: 'Fancy' QR Codes Are Making Quishing More Dangerous
KnowBe4, Friday, January 23rd, 2026
Scammers are increasingly using visually stylized QR codes to deliver phishing links, Help Net Security reports. QR code phishing (quishing) is already more difficult to detect, since these codes deliver links without a visible URL. Attackers are now using QR codes with colors, shapes, and logos woven into the code's pattern.
'Fancy QR codes further complicate detection,' Help Net Security says. 'Their layouts no longer resemble the familiar black and white grid. Logos appear in the center. Modules become rounded, stretched, or recolored. Background images blend into the code. These design changes preserve scan success while disrupting visual and structural assumptions used by existing detection tools.'
Help Net Security cites a report from Deakin University that looked at these 'fancy' QR codes, in which the researchers noted that these 'artistic and aesthetic QR codes are created by blending an image with black-white QR code where their modules are almost unidentifiable to 'the' human eye.'