adding a spoofed qr reply