CybersecuritySecurity

Quishing Defense

Decode QR codes hidden in emails and posters and scan the destination before anyone scans them.

Start with 500 free creditsDocumentation

Malware QR scan · 1 credit per lookup · no monthly fee

secure-login.coQuishing

Decoded, not scanned by phone

How it works

1

Send the QR image

Upload an image containing a QR code. Encrata decodes the code and extracts the URL it hides.

2

We scan the destination

The decoded link is resolved and scored exactly like a URL scan, following redirects and checking reputation feeds.

3

Act on the verdict

Learn where the code points, and how risky it is, without ever pointing a phone at it. One credit per scan.

One call, structured answer

Quishing Defense runs on the malware qr scan lookup at 1 credit per lookup. Same API key, same JSON shape as every other Encrata lookup.

  • Decodes the QR and scans the destination in a single call
  • Defends against quishing on posters, stickers and emailed codes
  • Same verdict, risk score and indicators as a direct URL scan
  • 1 credit per scan, with free cached repeats of the same code
Terminal
curl -X POST "https://developer.encrata.com/api/malware/qr/scan" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -F "image=@poster-qr.png"
response.json
{
  "kind": "qr",
  "verdict": "suspicious",
  "score": 68,
  "decoded_url": "https://pay.acme-invoice.co/settle",
  "final_url": "https://pay.acme-invoice.co/settle",
  "credits": 1
}

More malware qr scan use cases

View all
acme.com/eventMatches poster

Poster Verification

Verify printed QR codes on signage and flyers point where they claim to

EnterpriseVerification
pay.acme-invoice.coTampered

Caught before money moves

Payment QR Checks

Screen payment QR codes for tampering and redirection before money moves

FintechFraud

Inbound package

track.parcel-x.coReview

Mailroom Screening

Scan QR codes on inbound mail and packages as part of physical-security intake

SecurityProtection
Start with 500 free credits
$curl https://developer.encrata.com/api/lookup -H "Authorization: Bearer YOUR_API_KEY" -d '{"e": "satya@microsoft.com"}'