Federal News
Federal Agencies Warn Against Quishing Attacks
March 17, 2026
Federal agencies including the FBI and UK government institutions have issued warnings about the rising threat of quishing attacks, a form of QR code phishing that deceives users into scanning malicious QR codes to steal personal and financial data. This emerging cyber threat exploits the widespread use of QR codes, particularly since the pandemic, and presents new challenges for cybersecurity defenses and user awareness programs.
- Procurement professionals should prioritize cybersecurity solutions that address QR code-based phishing risks as part of agency security postures.
- Contractors offering advanced threat detection, user training, and secure QR code technologies may find increased demand from federal agencies.
- Agencies must consider integrating quishing-specific threat intelligence and mitigation strategies into cybersecurity requirements and solicitations.
- This development underscores the need for continuous updates to cybersecurity policies and contractor compliance standards to cover evolving phishing tactics.
Quishing is phishing 6just in a different wrapper. A QR code can lower people 27s guard because this technology became ubiquitous only during the pandemic, and the threat still isn 27t as widely recognized. It also shifts the 3risky click 4 from a visible link to a quick scan, making the danger easier to miss. Attackers are refining these tactics every year and constantly finding new ways to trick users.
— Konstantin Levinzon, Co-founder of Planet VPN
Agencies
Federal Bureau of Investigation, UK government institutions, Federal Trade Commission
Vendors
Planet VPN
Locations
Sources
- Watch what you scan: Quishing attacks are on the rise - Digital Journal · Digital Journal · Mar 17