A gas station near me has stickers on pumps with a QR code that supposedly links to a rewards app. I may be wrong, but I think it says something about paying through the app. Seems perfect for phishing.