QR code attacks use the same broad tactics as standard phishing campaigns. Targets will be sent an email with a required action to encourage them to interact with the QR code. Scanning the QR code will redirect the victim to a fraudulent phishing site to harvest usernames, passwords, bank details, and any other personal information the criminals can convince the target to give up.