@Anomnomnomaly Yeah, the nightmare here is that most of the real QR codes link to really fishy-looking URLs - generally payment/billing firms you've never heard of - so there's no good way for even a clued-up user to tell real from fake, other than these factors like whether the actual physical thing looks like a sticker over the real code