QR Phishing Awareness Games

Learn to check QR-code destinations and recognise quishing. Practise inspecting codes and choosing when to open, ignore or report them.

Questions about CyberPlay training

What is QR phishing?

QR phishing, also called quishing, uses a QR code to send someone to a deceptive destination. A convincing poster or familiar logo does not establish who controls the linked website.

Preview the URL before opening it. If a request is unexpected, reach the service through a known bookmark, app or independently verified address.

Warning signs to recognise

  • An unexpected code asks you to sign in or provide payment details.
  • The destination domain differs from the service you intended to use.
  • A reward or urgent instruction discourages checking the destination.

Practise with these games

  • Data Dash

    A 3D endless runner through a sunlit city. Jump, slide and dodge to collect data, deliver it safely, and make quick security choices.

  • Find the Fake Login

    A short investigative awareness game about sign-in pages: decide whether each login flow is legitimate, suspicious or malicious — by investigating, not by judging the logo. Twenty scenarios in four chapters, played from a 3D workstation.

  • INSIDER

    A multiplayer social-deduction game on floor 4 of Northwind Dynamics. Most players work through an ordinary day; one or two are running an attack chain — tailgating a badge door, dropping a USB stick, swapping a QR poster, changing a supplier’s bank details.

  • QR Hunt

    Scanning a QR code is like clicking a link you cannot read first. Walk a modern office, check twelve codes across six rooms, and decide for each one: open it, ignore it, or report it.

  • The Social Engineer

    You are Jordan Hale, Operations Analyst on the twelfth floor. People will ask for help, and some of them should have it. One workday from 09:00 to 16:45 puts ten or eleven requests at the badge door, the desk, the printer and the phone — the score is not how suspicious you were, it is how well you checked.

Related cybersecurity topics

Further reading

Contact · About