In simple terms, QR code operates in a similar vein as the UPC code on items scanned at a store checkout counter, although much more sophisticated. The QR code does not just give pricing and product information, it can take you directly to a website. If it's a phishing website, no other action is generally needed - your phone is usually infected as soon as the web page opens