QR codes are everywhere: menus, parking, event tickets, posters. They are convenient and, as a result, a popular target for scammers.
Why QR codes are risky
You cannot read a QR code by looking at it. It can hide any address, including a fake payment or login page. Criminals print stickers and place them over legitimate codes, or send QR codes in emails to get past filters that scan text.
Before you scan
- Look at the physical code. Is it a sticker on top of another code? Does it look scratched, misaligned or glued over?
- Think about the context. A code on an official sign in a staffed place is lower risk than one on a random poster.
- Be cautious of urgency. “Scan now to avoid a fine” is a pressure tactic.
After you scan
- Read the preview. Most scanners show the address before opening it. Check the domain carefully.
- Do not log in or pay through a page you reached by QR code unless you are sure of the domain.
- Prefer the official app. For parking, charging and payments, download the operator’s real app from the Play Store instead.
- Beware of downloads. A QR code that starts an app or file download from outside the Play Store is a red flag.
Use a scanner that checks the link
A normal camera scan opens the link. A scanner like LinkGuard reads the QR code first, follows redirects and runs 15 checks, then shows you a verdict before you open anything.
Quick steps in LinkGuard
- Open the app and tap Scan QR code.
- Point the camera at the code.
- Read the verdict and reasons.
- Open the link only if it looks safe.
If something looks wrong
Do not scan it. Tell the owner of the place, such as the shop or car park, so they can remove a fake sticker. Report it to local authorities if it relates to payments.