03/06/2026
QR-code phishing in restaurants is the trend of the summer.
The attack: a sticker is placed over the legitimate menu QR. Customer scans, lands on a fake page that asks them to “verify they're over 21” by entering a credit card. The card is harvested. The customer blames *the restaurant*.
What to do this week if you operate any kind of seated service:
• Walk every table. Confirm the QR codes match a printed reference.
• Tape over QR codes that aren't yours.
• Train staff: “if a customer says the menu asked for their card, that wasn't us, here's the manager.”
You don't need a tool for this. You need a five-minute walkaround. We do it for clients during quarterly site visits.