Etoolio

Is This QR Code Safe? QR Scam Checker

Free QR code safety checker. Upload a photo of a QR code and it decodes the hidden link in your browser, then checks the domain age, redirects and spoofing tricks to flag QR scams (quishing).

🔳
Upload a photo or screenshot of the QR code
It is decoded in your browser. Never scan an unknown QR with your camera app before checking it here.

See where a QR code goes before you scan it

A QR code is a link you cannot read. That is exactly why scammers love them: they hide a malicious address inside a harmless-looking square and stick it on a parking meter, a menu, a package or an email. This free checker decodes the QR code in your browser to reveal the hidden link, then checks that link for danger, so you find out where it goes before you ever point your camera at it.

How it works

  • Upload a photo or screenshot of the QR code.
  • It decodes the code in your browser and shows you the exact link or content inside.
  • If it is a website, it follows the redirects, checks how old the domain is, and scans the address for spoofing tricks, then gives a clear verdict.

What quishing is, and why it works

Quishing is phishing with QR codes. Because the human eye cannot read a QR code, you have no way to tell a genuine one from a fake, and a small sticker placed over a real code is invisible. Scanning takes you straight to a convincing fake login or payment page. QR scams have appeared on parking meters, restaurant tables, delivery notices and posters. Checking the code first, instead of trusting it, removes the whole trick.

Why not just scan it?

Scanning with your phone's camera opens the destination immediately, which is what the attacker wants. Uploading the image here reads the link without visiting it, so you see the real address and its safety check first. It is the QR version of hovering over a link before you click.

Private and honest

The QR code is decoded entirely in your browser; the image never leaves your device. Only the link inside (if it is a website) is sent to our server to check the domain, just like our link checker. A clean result is strong evidence, not a guarantee, so never enter passwords or payment details on a page you reached from an unexpected QR code. This is part of the RealCheck set of tools for the AI era: is this real?

Good to know

Is This QR Code Safe? QR Scam Checker, frequently asked questions

How do I check if a QR code is safe?

Upload a photo or screenshot of the QR code here. It is decoded in your browser to reveal the link or content hidden inside, which you cannot read by eye. If it is a website link, the tool then checks that site the same way our link checker does, following redirects and looking at the domain's age and spoofing tricks, and gives you a verdict before you ever point your camera at it.

What is a QR code scam (quishing)?

Quishing is phishing using QR codes. Because you cannot read a QR code with your eyes, criminals hide a malicious link inside one and place it on fake parking meters, restaurant tables, packages, emails or posters. When you scan it, you are sent to a fake login or payment page. Stickers placed over legitimate QR codes are a common trick. Checking the code before scanning defeats this.

Why upload the QR instead of scanning it with my phone?

Because scanning with your camera app takes you straight to the destination, which is exactly what an attacker wants. Uploading the image here decodes the link without visiting it, so you see where it really goes first. It is the QR equivalent of checking a link before you click it.

What does it check once it reads the link?

For a website link, it follows any redirects to the real destination, looks up how old the domain is (scam sites are usually brand new), and scans the address for lookalike or punycode domains, raw IP addresses, brand names in the wrong place and other tricks. If the QR contains something else, like Wi-Fi credentials or a payment request, it shows you exactly what it is so you can judge it.

Is a safe result a guarantee?

No. It means no strong red flags were found in the link, not that the site is guaranteed safe. Treat it as strong evidence, and never enter passwords or payment details on a page you reached through an unexpected QR code. If a QR code in a public place looks like a sticker placed over another one, do not scan it at all.

Is my image or the QR content uploaded?

The QR code is decoded entirely in your browser, so the image never leaves your device. If the code contains a website link, that link (not the image) is sent to our server to look up the domain's age and follow its redirects, exactly as with our link checker.

Is it free?

Yes, free with no signup and unlimited.

Keep going

Related tools

Is This Email Real? Email Scam CheckerPaste a suspicious email to check if it is genuine or a phishing scam, privately.Is This Link Safe? Website & Link CheckerPaste a suspicious link to check the domain age, redirects and spoofing tricks.Is This Photo Real or AI? Image CheckerUpload an image to read its metadata and see if it is a real photo, AI or edited.Is This Number a Scam? Phone CheckerCheck a phone number's country and line type, and see if it has scam-risk traits.