QR code scanning

Paubox inbound email security uses QR code scanning to help protect users from a growing class of phishing attacks that rely on malicious QR codes.

Attackers increasingly embed QR codes in emails, attachments, and images to bypass traditional link scanning. Paubox addresses this risk by inspecting QR codes wherever they appear in inbound email and blocking messages that lead to known phishing destinations.

How QR code scanning works

When an inbound email is processed, Paubox scans all images for QR codes and safely analyzes the destination URL associated with each code.

• All images are inspected by the Paubox QR code scanner

• QR codes are detected in:

  • Email attachments

  • Inline images

  • QR codes embedded within other images, such as flyers or marketing graphics

If a QR code resolves to a phishing or malicious website, Paubox automatically quarantines the email before it reaches the end user’s mailbox.

What happens when a threat is detected

If a QR code points to a phishing link:

• The message is automatically quarantined

• The message is categorized as Phish

• Admin can review the quarantined message from the Paubox dashboard