Since QR codes became ubiquitous in public places, I started thinking about someone planting fake ones, on top of the original ones, that would redirect to shady websites. If the website is similar enough to the one it impersonates, it would be hard for the user to distinguish.