If you receive a suspicious email with a QR code, report it to your IT or security team at work but if one shows up on your personal account, you can always report it as spam or potential phishing.