QR Code Scams: How to Check a QR Link Before You Scan
QR codes can hide phishing links, payment scams, and fake menus. Here is how to check the link before trusting it.
Why QR codes are easy to abuse
QR codes are convenient because you cannot read the destination by looking at the code. That makes them useful for attackers who want to hide a malicious link in a poster, parking meter, restaurant table, email, or package.
Common QR code scams
- Fake parking payment pages
- Fake restaurant menus that ask for card details
- Delivery tracking pages that request a small payment
- Crypto wallet or bank login pages
- Stickers placed over real QR codes in public places
Check before opening
Most phones show a preview of the URL before opening it. Read that preview. If the domain looks strange, shortened, misspelled, or unrelated to the place you are in, do not continue.
Safer habits
- Use the official app when paying or logging in
- Avoid scanning QR stickers placed over printed signs
- Check the domain before entering information
- Do not install apps from QR links unless you trust the source
- Run suspicious QR links through a link checker first
Bottom line
A QR code is just a hidden link. Treat it the same way you would treat a strange URL in an email or text message.
CheckLink browser extension
Open the current page, inspect links from the browser menu, and jump into CheckLink faster without an account.
Works with Chrome and compatible Chromium-based desktop browsers. Firefox and Safari versions are not currently available.
The extension sends a URL only when you choose a scan action. It does not store scan history.