Safety
QR Code Safety Checklist: What to Check Before You Scan
A QR code is just a shortcut. Treat the page it opens with the same caution you would use for any link.
Search intent
Help users scan QR codes with more confidence and less risk.
Look for tampering
Before scanning a QR code in public, look at the sticker or sign. Attackers can place a malicious QR sticker over a real one, especially on parking meters, payment signs, posters, or table tents.
If the QR looks pasted over, mismatched, crooked, or recently added, use the official app, official website, or typed URL instead.
Preview the destination
Modern phone scanners usually show a preview of the link or action before opening it. Read it. A restaurant menu QR should not open a strange payment page. A parking QR should match the operator or city domain you expect.
If the destination uses a short link, be more careful. Short links can be legitimate, but they hide the final destination until after the redirect.
Be cautious with payment and login pages
A QR code should not pressure you into entering passwords, one-time codes, card details, or banking information unless you are sure the destination is official. Browser warnings, misspelled domains, and unexpected login prompts are all reasons to stop.
If a QR code opens an app download page, verify the publisher in the App Store or Google Play before installing.
Keep scanning permissions narrow
QR scanning usually only needs camera access while you scan. Be cautious with scanner apps that ask for unrelated permissions or push aggressive ads. Native camera scanning is enough for many everyday scans, while a dedicated app is useful when you also need generation, history, styling, or content-specific QR types.
Quick workflow
Steps to follow
Inspect the physical code
Check whether the QR appears pasted over, damaged, or inconsistent with the sign.
Read the link preview
Confirm the destination looks related to the place, brand, or task.
Avoid surprise login or payment pages
Stop if a simple menu or sign suddenly asks for sensitive information.
Use official channels when unsure
Type the known website, open the official app, or ask staff before continuing.
Common questions
Before you print or share
Can a QR code itself contain a virus?
A normal QR code is data, often a link. The risk is usually the destination it opens or the action it asks you to take.
Are short links in QR codes bad?
Not always. They can keep QR patterns simpler, but they hide the final destination. Use extra caution when the context is sensitive.
Should I use my phone camera or a scanner app?
Native camera scanning is fine for many scans. A scanner-generator app is useful when you want history, creation tools, QR type builders, or styling controls.