There should be a warning in the "Scan QR Code" function in the app.

I know there is text warning you about that on the login page in the browser/desktop app, but it should also be in the mobile app, since that's how most people will get their account stolen, the phishing scams will try to convince them to scan a QR code with the app.