How to Check if a QR Code Is Safe Before You Open It

A QR code is only a picture of a web address or some text. The code itself cannot hurt you, but the page it opens can be a fake. Scan with care, especially in public places.

Before you open the link

• Read the address. Our QR code scanner shows the full address first and asks before opening it.
• Check the domain. The real name sits just before the first single slash. "bank.example.com" belongs to example.com, but "example.com.pay-now.site" belongs to pay-now.site.
• Be wary of shortened links that hide where they go.
• Look at the sticker. A code stuck over another code is a common trick on parking meters and posters.

Never do this after scanning

• Do not enter your password, card number, PIN or one-time code on a page you reached from a code you do not trust.
• Do not install an app from a code unless it takes you to the official store page.
• Do not scan a code to "receive" money. You never need to scan or enter a PIN to receive a payment.

Safer habits

1. Type the website yourself when you can.
2. Use a phone with updated software.
3. If something feels rushed or too good to be true, close it.

If you do enter details by mistake, contact your bank right away and change the password of the account involved. You can also make your own code with the QR code generator and check where it points before printing it.