QR Code Scam Checker
Scanned a QR code and got a link? Paste the URL below. This tool checks it for common phishing and scam signals and gives you a risk score with plain explanations. Everything runs in your browser — nothing is uploaded or stored.
Risk score
Signals found
Safe next steps
This is an automated guide only and cannot guarantee safety. When in doubt, open the official app or type the official website address yourself instead of following any QR link.
How to use
- Scan the QR code with your phone camera but do not tap Open yet.
- Copy the link your phone shows and paste it into the box above.
- Press Check — read the score, the matched signals and the safe next steps.
Tips
- QR codes on stickers pasted over posters, parking meters or restaurant tables are a common scam trick. Check whether the sticker looks added on.
- A real bank or government office will never send a QR code that asks you to log in through a shortened or misspelled link.
- Never enter your card PIN, password or one-time code on a page you reached only through a QR code.
- If the page asks for payment urgently or with a countdown timer, close it — urgency is a classic pressure tactic.
Frequently Asked Questions (FAQ)
How does the QR code scam checker work?
Paste the URL from a scanned QR code into the box and press Check. The tool looks for common phishing and scam signals, then gives a risk score with plain explanations. Everything runs in your browser, nothing is uploaded or stored.
What scam signals does it detect?
It checks for URL shorteners, lookalike brand domains, missing HTTPS, raw IP hosts, punycode domains, suspicious domain endings, the @ trick, hidden redirect parameters, unusual ports and sensitive login keywords.
Can the checker guarantee a link is safe?
No. It is an automated guide only and cannot guarantee safety. When in doubt, open the official app or type the official website address yourself instead of following any QR link.
Does it work on shortened links?
Yes. URL shorteners are one of the signals it checks, because a shortened link hides the real destination.