Online Safety Guide
Are QR Codes Safe?
QR codes are widely used for menus, payments, parking, tickets, logins, and promotions. Most are legitimate, but a QR code can also hide a phishing link, fake payment page, or malicious destination.
So, are QR codes safe?
QR codes are not automatically safe or dangerous. They are simply a way to encode information such as a website URL, payment request, contact information, or text.
The risk comes from the destination or action behind the code. Because you usually cannot see the destination by looking at the QR image, scammers can use that hidden destination to their advantage.
Warning signs
6 signs a QR code may be suspicious
The QR code looks like a sticker placed over another code
Attackers can cover a legitimate QR code with a fake one. This is especially important around parking meters, payment signs, restaurants, and public posters.
The destination domain looks unfamiliar
After scanning, check the domain before opening the page. A trusted company should normally use its official website domain.
The page asks for sensitive information
Be cautious if a QR destination immediately requests passwords, card information, PINs, verification codes, recovery codes, or identity details.
You are asked to make an urgent payment
Scammers may use QR codes for fake parking fees, delivery charges, refunds, account verification, or other urgent payment requests.
The QR code came from an unexpected message
An unexpected QR image in an email, text message, social media DM, package, or document should be treated with the same caution as an unknown link.
The QR code starts an unexpected download
Do not install an unfamiliar app or download a file simply because a QR code tells you to. Verify the source first.
How QR code scams work
A scammer creates a QR code that points to a website or action they control. They then place the QR code somewhere people are likely to trust it.
• A fake parking QR code sends drivers to a fraudulent payment page.
• A QR code in an email leads to a fake company login page.
• A sticker covers the real payment QR code at a public location.
• A fake delivery notice uses a QR code to request a small fee.
• A QR code promotes an investment, giveaway, or prize scam.
Check the destination before opening it
A safer QR scanner should show you what the QR code contains before automatically opening a website.
If the result is a URL, inspect the domain carefully. Look for misspellings, extra words, strange subdomains, unusual domain endings, or a website that does not match the organization shown on the QR code.
Check a QR code with TrustLens →Be extra careful with QR payments
QR codes are commonly used for legitimate payments, but payment QR codes can also be replaced or manipulated.
Before confirming a payment
Check the recipient name, merchant, amount, and details displayed inside your official banking or payment app. If anything is different from what you expected, cancel the payment and verify the code first.
Where QR code scams can appear
Parking meters and payment signs
Restaurant menus and public posters
Unexpected packages and letters
Emails and text messages
Social media promotions
Fake invoices and payment requests
Events and ticketing signs
Public Wi-Fi login posters
What should you do before scanning a QR code?
Look for signs that a sticker was placed over another QR code.
Consider where the QR code came from and whether you expected it.
Use a scanner that shows the destination before opening it.
Check the domain carefully if the code contains a URL.
Do not enter passwords, payment details, or verification codes unless you trust the destination.
Verify unexpected payment or account requests independently.
What if you already opened a suspicious QR link?
If you only opened the page and did not enter information, close it if anything looks suspicious.
If you entered a password, change it using the real service. If you provided card or banking information, contact your financial provider through its official support channel.
If you downloaded an unfamiliar file or app, avoid opening it and review your device security.
TrustLens QR Code Scam Checker
Have a QR code you do not trust?
Scan it with TrustLens and review the destination before opening the page, signing in, or making a payment.
Open QR Code Scam CheckerFrequently asked questions
QR code safety FAQ
Are QR codes themselves dangerous?
A QR code is just a way to store information. The risk comes from what the code contains or where it sends you. A malicious QR code can point to a phishing page, fake payment site, or unwanted download.
Can a QR code steal information automatically?
Scanning a QR code does not normally hand over your passwords or payment details by itself. The bigger risk is being redirected to a deceptive page where you are tricked into entering information or taking another unsafe action.
How do I check a QR code before opening it?
Use a scanner that lets you see or extract the destination first. Then inspect the URL, domain, spelling, and request before deciding whether to open it.
Can a legitimate QR code be replaced?
Yes. A scammer can place a sticker containing a malicious QR code over a legitimate code on a sign, menu, parking meter, payment terminal, or poster.
More TrustLens tools