Whoa, just got an NZPost-branded phishing email with a QR code in it... I'm fairly certain that if I followed it on a Windows (or perhaps Android) device, it'd result in my system being pwned. Needless to say, I wouldn't tempt fate. Careful out there, folks!