Decoded destination
Use the site’s QR tool to extract the URL without treating the QR image as trustworthy.
Home / Check a suspicious QR code link
QR-code safety
Check a suspicious QR code link
Why this deserves a check
QR codes can be placed in texts, emails, letters, parking signs, packages and physical stickers. The image itself does not show whether the destination is the organization you expect.
Scammers can use QR codes to send people to lookalike payment or login pages. The safest workflow is to decode first, inspect the domain and then use an independently known website for sensitive actions.
What Can I Share This? checks
Redirect chain
Show when the decoded link changes destination.
Threat reports
Check eligible public destinations against known malware and phishing reports.
Context
Identify the content type, final domain and other warning signals before you act.
Example scanner output
This documented regression fixture shows the same classifications used by the Universal Safety Checker.
- Detected type
- Website
- Threat fixture
- Social engineering
- Reputation state
- Known dangerous
- Recommended action
- Do not continue
This uses Google's official Safe Browsing phishing test URL, not a live malicious page or a user-submitted scan.
What the result cannot prove
No scanner can guarantee that a link, sender or website is safe. A result can report known threats and warning signals, but it cannot prove identity, business legitimacy, licensing, product quality or future behavior. For sensitive actions, verify the organization independently.
Safer next steps
- Do not scan a QR code just because it appears on an official-looking letter or sign.
- Compare the final domain with the organization’s real website.
- For payments, open the official app or type the known address yourself.
- If a sticker appears to cover another QR code, do not use it.
Frequently asked questions
Can a QR code itself contain malware?
A QR code usually contains data such as a URL. The danger is typically what the decoded destination asks you to open, download, pay or enter.
Can I check a QR code without visiting its website?
Yes. Decode the QR code first and inspect the resulting URL before deciding whether to visit it.
Why are QR payment scams effective?
The destination is visually hidden in the code, so people may focus on the surrounding logo or sign instead of the actual domain.
What if the QR code came by text?
Treat both the message and QR destination as untrusted until you verify the request through an official channel.
Related safety guides
Primary references
Check it before you trust it
Paste the suspicious link or email address into the same checker. You will get the destination, available threat signals and a plain-language recommendation without a signup.
Check a link or emailLast reviewed: 2026-09-03 · Can I Share This? safety content