Hidden destination
A QR code can conceal a destination until it is scanned. Preview the link before opening it.
CyberLab Identity · QR security
Secure QR Verification
Review the identity-verification page associated with a simulated QR notification.
QR-linked identity verification · Training demonstration
Email address — demonstration only
Sample employee identity
Password — demonstration only
••••••••••••
Educational demonstration only. No real credentials or personal information are required. All displayed fields are non-editable.
You've been quished!
This authorized QR phishing simulation demonstrates how a QR notification can obscure its destination and encourage an unexpected verification step.
What should you have noticed?
Unexpected QR request
Be cautious when an unexpected message asks you to scan a QR code to verify an account.
Destination after scanning
Inspect the complete destination domain after scanning and before continuing.
FortiMail Workspace Analysis
In the Experience Room, review how FortiMail Workspace analyzes sender identity, message context, destination URLs and other indicators associated with this scenario.