Protect yourself: Scammed by a QR Code? It didn’t have to happen

University of Rochester engineers have built a new form of QR code that prevents the growing cybercrime of ‘quishing.’

Apr 2, 2025

1 min

QR codes are used everywhere nowadays – to pay for metered parking, to read menus at restaurants, to win a free cup of coffee. Cybercriminals are using them, too – redirecting users to harmful websites that harvest their data.



The practice is known as “quishing,” derived from QR code phishing, and it is a fast-growing cybercrime. But it doesn’t have to be.


University of Rochester engineers Gaurav Sharma and Irving Barron have devised a new form of QR code – called a self-authenticating dual-modulated QR (SDMQR) – that protects smartphone users from quishing attacks by signaling when users are being directed to a safe link or a potential scam.


Gaurav is a professor of electrical and computer engineering, computer science, and biostatistics and computational biology. Barron is an assistant professor of instruction in electrical computer engineering.


Their creation involves allowing companies to register their websites and embed a cryptographic signature in a QR code. When the code is scanned, the user is notified that the code is from an official source and safe.


Gaurav and Barron recently wrote about their technology in the journal IEEE Security and Privacy, and spoke about their work on the National Science Foundation's Discovery Files podcast.


They can be reached by email at gaurav.sharma@rochester.edu and ibarron@ur.rochester.edu.


You might also like...

Check out some other posts from University of Rochester

2 min

In an age of fast-moving misinformation, our expert teaches students how to spot what’s credible

As the new academic year begins, and at a time when misinformation often travels faster than facts, University of Rochester’s Kevin Meuwissen offers educators and young learners clarity and practical strategies for identifying credible sources. As an associate professor and chair of teaching and curriculum at the Warner School of Education and Human Development, Meuwissen focuses on how children and teens learn about politics and history — and how they can be taught to critically evaluate what they consume. “Young people pay close attention to who’s been consistently accurate,” he says. “They’re more likely to trust someone over time if their information holds up.” To empower students in our complex information environment, Meuwissen champions the so-called SIFT method — an easy-to-remember acronym and evidence-based toolkit that breaks down like this: • Stop! Pause before reacting or sharing • Investigate the source • Find better coverage • Trace claims back to their origin He also warns about how emotional framing, AI-generated visuals, deep fakes, and repeated exposure can distort judgment through the illusory truth effect — making misinformation feel believable even when it isn’t. His "Ever Wonder: How Can You Tell If A Source Is Credible?" video  is a handy teaching tool.  Meuwissen and his colleagues encourage teachers grappling with resistance over topics like climate science to consider not just evidence depth, but also students’ identities — political, cultural, and otherwise — when designing lessons. His approach emphasizes building trust, modeling thoughtful verification, and nurturing classroom norms rooted in accuracy — traits essential for forming discerning digital citizens. Kevin Meuwissen is available for interviews about identifying misinformation. He can be contacted through Warner School of Education Director of Communications Theresa Danylak at tdanylak@warner.rochester.edu.

2 min

As Trump rolls back regulations, this expert examines the costs of compliance

President Donald Trump has signaled a push to scale back federal regulation across a wide range of industries, reigniting a national debate over the costs and benefits of government rules. For Joseph Kalmenovitz, an assistant professor of finance at the University of Rochester’s Simon Business School who studies the economics of regulation, the moment underscores the importance of understanding not just what regulations do — but how much they cost. Kalmenovitz, who combines legal training with cutting-edge empirical methods, has developed innovative ways to measure regulatory intensity. His research shows how compliance requirements translate into millions of additional hours of paperwork for firms — costs that often fall outside public view. A recent Bloomberg Law article cited his work in explaining how Wall Street alone devotes an estimated 51 million extra hours each year to compliance since the Great Financial Crisis. Beyond tallying hours, Kalmenovitz’s studies also explore how overlapping rules across agencies — what he calls “regulatory fragmentation” — can stifle productivity, profitability, and growth, especially for smaller firms. His long-term aim is to provide evidence-based insights that can guide smarter rulemaking in Washington. “The dream is that people will take insights from my work and use them to improve the way regulation is conceived,” he told Simon Business Magazine. Kalmenovitz is a leading voice in translating data into meaningful insights about the hidden costs and design of regulation whose work has been published in the Journal of Finance, the Review of Financial Studies, Management Science, and the Journal of Law and Economics. He is available for interviews and can be contacted through his profile.

1 min

Trump-Putin Talks in Alaska: Randall Stone Available for Expert Commentary

President Donald Trump and Russian President Vladimir Putin are scheduled to meet today in Alaska to discuss an end to the war in Ukraine, which Russia invaded in 2022. But Ukraine, whose president wasn’t invited to the talks, and its European allies, whose representatives were also kept out of the conversation, have expressed fears that a deal could be struck without Kyiv’s involvement. Randall Stone, a political scientist and director of the Skalny Center for Polish and Central European Studies at the University of Rochester, has been following the developments in the war closely and is available to lend insight to reporters covering the high-stakes summit. “The war has shifted Russian strategy and economic ties away from the West and toward China, Iran, and India,” Stone told Newsweek last year. “If he succeeds in Ukraine, he will probably seeks to challenge U.S. NATO allies Estonia, Latvia, and Lithuania, whose membership in NATO he has always seen as a threat to Russia.” Trump has downplayed his expectations for a possible breakthrough, voicing frustration with what he has described as Putin’s “meaningless” gestures toward resolving the conflict, and referring to the talks as a chance for him to see what Putin has in mind. The two leaders are expected to hold a joint news conference at the conclusion of their talk. Contact Stone for fresh perspective on the high-stakes summit.

View all posts