Are QR codes safe?
Updated · 4 min read
A QR code is just a way to store text, usually a link. The risk is where that link leads, which you cannot see until you scan it.
What is quishing?
Quishing (QR phishing) is when scammers place QR codes that lead to fake login pages, payment pages or malware downloads. Common tricks include stickers placed over genuine codes on parking meters and posters, and QR codes in emails that bypass link filters.
How to scan safely
- Check the link preview your camera shows before opening it.
- Be suspicious of stickers placed over other codes.
- Never enter passwords or card details on a page opened from an unexpected QR code; go to the official site directly instead.
- Be wary of QR codes in unsolicited emails and messages.
How businesses can protect customers
- Use tamper-evident printing and check public codes regularly for stickers.
- Point codes to your own recognisable domain.
- Use a dynamic QR code provider that reviews abuse reports and can suspend malicious links.
Frequently asked questions
Can scanning a QR code hack my phone?
Scanning alone only reads text. The danger comes from opening a malicious link and then entering information or downloading files, so check the link before you open it.
How do I report a malicious QR code?
Report it to the organisation whose code was tampered with. For codes created with this service, use the report abuse page and the link will be reviewed.
Make your QR code now
Free, private and no sign-up. Download PNG or SVG.
Open the free QR code generator