Are QR Codes Safe?

QR codes are generally safe as a format, but the destination behind a QR code can be unsafe if it leads to a malicious website, fake login page or misleading download.

The QR code itself is not the main risk

A QR code is a way of storing information. The risk usually comes from where it sends the user. A code can point to a legitimate website, but it can also point to a phishing page or a suspicious file.

How to scan more safely

Check the preview link before opening it. Most phones show the destination before loading the page. Be cautious if the domain looks misspelled, shortened, unrelated to the organisation, or unnecessarily complicated.

Avoid entering passwords, payment details or sensitive information after scanning a code unless you are confident the destination is genuine.

Business safety tips

If you publish QR codes, use your own recognisable domain where possible. Place codes in locations where they cannot easily be covered by stickers. For public posters, check them periodically for tampering.

When to avoid scanning

Avoid scanning codes placed randomly in public areas with no context. Be especially cautious with codes claiming urgent payments, fines, parcel fees or account warnings.