QR security demo · Demo D
A phishing-style invoice whose only call-to-action is a QR image. The destination URL appears nowhere as text — so link and URL-reputation scanners have nothing to flag.
Open it, then run it through any public link-reputation checker live: it comes back clean, because the URL is trapped inside the code. The QR points at this demo's own harmless reveal page — no real invoice, brand, or payment is involved.
Awareness / education material