Are QR Codes Safe? How to Spot a Suspicious QR Code
QR codes themselves are just a way to store text. The risk comes from what the code points to. Because you cannot read a QR code with your eyes, a harmful link can be hidden behind one. A few habits keep you safe.
Why people can be tricked
Scammers sometimes stick a fake QR code over a real one, or send codes in emails and messages, hoping you will scan without thinking. The link may lead to a page that pretends to be a bank, a delivery company or a payment service.
Warning signs
- A sticker placed on top of another code or poster
- A code that arrives unexpectedly in a message or email
- A page that asks for passwords, card numbers or one-time codes straight after scanning
- A web address that looks slightly wrong, with spelling changes or strange endings
- Pressure such as "act now" or "your account will be closed"
How to scan safely
- Look at the link preview your phone shows and read the full address before opening.
- Be careful with codes in public places and check they are not stickers.
- Do not log in or pay on a page you reached from an unknown code. Open the official website or app yourself instead.
- Keep your phone and browser updated.
If you create QR codes
Only encode links you control, use a clear label next to the code, and check the destination works. This helps your audience trust it. QRIQO makes static codes and does not track or redirect your scans.
What to do if you scanned something suspicious
Close the page, do not enter any details, and if you did, change that password and contact the service. You can read more in our disclaimer and privacy policy.