Quick answer
QR codes can redirect to phishing pages, fake payment portals, or malware. Before scanning a QR code — especially one placed in a public location or sent in a message — verify the source and check where it leads before proceeding.
What Our Tool Checks
Whether the QR code destination matches the claimed purpose
Domain of the landing URL vs. the brand on the physical sign
Whether the QR code is a sticker placed over an original
Context — restaurant menu vs. an unexpected text message
Login or payment page reached after scanning
Common Warning Signs
Do not scan a suspicious QR code just to test it — use a QR scanner app that shows the destination URL first.
QR code is a sticker placed over an original code (common on parking meters, restaurant tables)
Leads to a login or payment page when you expected a menu or information page
Domain in the landing URL does not match the venue or brand
Received in an unsolicited text, email, or direct message
Creates urgency — 'scan within 24 hours'
What Not to Submit
To protect your privacy, never paste these into any tool — and never submit passwords, OTPs, card numbers, bank logins, or private IDs.
Payment details on a page reached solely via a QR code without verifying the domain
Login credentials for banking or email apps via a QR code link
Personal ID on an unverified QR-code destination
What to Do If Something Looks Suspicious
Use a QR scanner app that shows the destination URL before opening it
Check that the URL shown matches the brand or venue before tapping 'go'
If a QR code in a public place looks tampered with, inform the venue staff
Report tampered payment QR codes to local police and the payment provider