Technical Definition

Quishing

Quishing is phishing that uses a QR code to direct victims to a malicious site, wallet request, or payment destination.

By Crypto University Editorial
PhishingWallet DrainerPrivate Key

✦ Key Insight

Recognizing Quishing can help users detect suspicious requests earlier and avoid signing, approving, installing, or paying into an attacker-controlled flow.

✕ Common Misconceptions

Do not rely on branding, screenshots, caller identity, transaction previews, or search results alone. Verify official domains, contract addresses, permissions, and wallet prompts independently.

Detailed Explanation

Quishing is phishing that uses a QR code to direct victims to a malicious site, wallet request, or payment destination. Attackers may combine this technique with phishing, malware, stolen credentials, or misleading wallet prompts.

In Practice

“A user encounters signs of Quishing when a website, wallet prompt, support message, software update, or smart-contract interaction behaves unexpectedly.”

Dig Deeper

Smart Contract

A smart contract is blockchain-deployed code that can hold state and execute predefined rules when called.

Private Key

The secret number that authorises spending from a crypto address.

Phishing

Fake sites, emails or messages built to trick you into revealing credentials or signing a malicious transaction.

Token Approval

Permission you grant a smart contract to move a specific token from your wallet on your behalf.

Wallet Drainer

Malicious code on a website that empties a connected wallet once the user signs its transaction.