Not directly a QR thing but people trying to use QR's good name for nefarious purposes. I'm sure you're all aware of this in all sorts of businesses but thought it worth a reminder as I seem to be getting these every day now. Still lots of pointers that they are fake but they are slightly better quality than the average and when in a cluster of other (genuine) emails they maybe inadvertently clicked on. I attach a picture.
The links in the document go to sites in Brazil and Russia: most common being time (dot) amiek (dot) ru