QR phishing

A QR code hides where it goes until you are already there. That is the point of it, and it is also the problem.

You cannot glance at a QR code and spot a suspicious address the way you can with a link, because there is nothing to read. It usually moves you onto your personal phone as well, away from whatever protections your work laptop had. Stickers over legitimate codes on parking meters and restaurant tables are now common. Check what address actually loaded before you type anything into the page it took you to.