A text-rendered QR code is a QR-like pattern built from characters in the email body instead of a normal image file. It may use symbols, boxes, or ASCII-style layout that only becomes meaningful when the message is displayed in a mail client.
This matters because many email security tools focus on scanning links, attachments, or image-based QR codes. A text-rendered pattern can slip past those checks if the system does not inspect rendered content or rebuild what the user sees on screen. In real attacks, the pattern usually leads the victim to scan with a phone and open a phishing page, often to steal credentials or push a malicious login flow. Defenders should treat any QR-like content in email as suspicious and use QR-aware inspection, rendering checks, and phishing-resistant authentication to reduce risk.