{"id":"sec-sb-qr-sticker-staff-steps","audience":"small-business","category":"security","track":"security","technique":"format","title":"Tell restaurant staff what to do about fake QR stickers","free":false,"task":"Someone stuck fake QR code stickers over your restaurant's table codes. Write the staff instructions: exactly 3 numbered steps for today's shift, each under 15 words, then one line starting 'Sign:' with the exact words for a small table sign for customers (under 15 words). Use only what's in your notes. Plain text, under 80 words.","materialLabel":"Your notes (attached to your prompt automatically)","material":"Notes - Marisol, owner, Casa Verde Kitchen (Nov 6, 2026)\n\n- At lunch, a customer said the menu QR code on table 7 opened a \"pay your bill here\" page asking for card details. Our real code just opens the menu at casaverde.example.com/menu, we never take payment by QR.\n- I checked: tables 3, 7 and 12 had a sticker on top of our printed code. Peeled them off. The fake page was casaverde-pay.example.net.\n- Plan for today: servers check every table's QR code at the start of each shift (look for a sticker on top, run a finger over it). Peel any sticker and give it to me, don't throw it away.\n- If a customer says they paid through a QR code, give them my number (555) 013-6620 and tell them to call their card company. Don't try to sort it out at the table.\n- Payment is only at the counter or with the server's handheld card reader.\n- I already reported the fake site to the police non-emergency line.\n- New laminated QR cards arrive Monday.","rules":[{"type":"numberedItems","count":3},{"type":"plainText"},{"type":"maxWords","max":80}],"mistakes":[{"title":"A long memo","why":"The AI explains QR scams in paragraphs during a busy shift.","fix":"Limit it: \"Exactly 3 numbered steps, each under 12 words.\"","checks":["numberedItems","maxWords"]},{"title":"Generic advice","why":"The AI says 'report it to management' instead of your steps.","fix":"Say: \"Use only the steps in my notes.\"","checks":["r0","r2"]},{"title":"Forgetting customers","why":"The AI only writes for staff, but customers scan the codes.","fix":"Ask: \"End with Sign: the words for a table sign, under 12 words.\"","checks":["r1"]},{"title":"Letting markdown in","why":"AI adds bold and headings by default, and in a printed note they show up as stray symbols.","fix":"Add: \"Plain text only, no bold, no headings.\"","checks":["plainText"]}],"promptHints":[{"label":"Asks for a fixed number of steps","patterns":["\\b(3|three)\\b.{0,15}steps","exactly \\d+"]},{"label":"Asks for the table sign","patterns":["sign:","table sign","customers"]},{"label":"Uses your notes","patterns":["my notes","only","from the notes"]},{"label":"Sets a word limit","patterns":["\\d+\\s*words","word (limit|count)"]},{"label":"Asks for plain text","patterns":["plain","no bold","no markdown","no formatting","no headings"]}],"hint":"Staff need a few steps they can remember mid-shift, and customers need one clear message. Ask for both, in the exact shape, from your notes only.","rubricLabels":["The 3 steps cover: check every table's QR code at the start of the shift for stickers; peel any sticker and give it to Marisol (not throw it away); if a customer paid through a QR code, give them (555) 013-6620 and tell them to call their card company","There is a last line starting 'Sign:' with under 15 words telling customers we never take payment by QR code (pay at the counter or with your server)","Uses only facts from the notes (no new phone numbers, websites or steps like calling the police at the table)"]}