Cyber Security

Further advice on Phishing emails using QR codes

The QR code you scanned was made by GMCA and placed on a phishing awareness poster. Please read the tips on the poster. QR codes on posters put up by mangers with official logos are likely to be genuine. 

It is unlikely that any QR codes shared via email are legitimate. If you receive a QR in the body of an email please report it by using the report it now button in outlook. 

Take a look at the general six tips below:

1. Public domains - legitimate organisations will never contact you from a public domain like '@gmail.com'.

2. Domain spoofing - email addresses may appear genuine at first glance but often include slight spelling errors like '@gocgle.com'.

3. Beware of urgency - take caution when receiving urgent requests from co-workers. even if the email address is genuine, it may be a case of account takeover.

4. Hover over links - before clicking a link in an email, always hover your mouse over it to reveal the true URL destination.

5. Attachments - companies rarely send documents like invoices as email attachments. If you're unsure, check with them through their official contact number or online chat. 

6. Sensitive info - organisations will never ask for you to send sensitive information like login credentials or bank details over email.