Another way crooks can bypass email protection in phishing attacks is through the use of QR codes. Since these come in .JPG or similar image formats, they rarely get scanned for malice.