We'll start with the second workflow mentioned above, i.e., creating an image first and then combining it with the QR code. Here's how to get started in Think Diffusion.

Yet nearly 4 out of 5 organizations (76%) were compromised by these methods in the last year — and just 5.5% could detect and block image-based email and QR code phishing attacks from reaching ...

You don’t need an app for this —your phone can do it already. You don’t need an app for this —your phone can do it already. The humble QR (or Quick Response) code has become ubiquitous ...

Be highly suspicious of any QR codes embedded into the body of an email. There are rarely legitimate reasons for benign emails from legitimate sites or services to use a QR code instead of a link.