QR code safety: how to avoid scams
A QR code itself is harmless — it is just a link. The danger is where it leads. The common schemes and simple rules to check.
How scammers use QR codes
- Sticker swaps — a fake code stuck over the real one on a parking meter, scooter or menu.
- Phishing sites — the code opens a copy of a bank or service site that asks for card details.
- Fake fines and notices — a code in a letter or flyer demanding urgent payment.
- Malicious files — the code offers an app download outside the official store.
Rules for people scanning
- Read the address in the banner before opening it: the domain must match the organisation.
- Check whether the code is stuck on top of another one.
- Never enter card details on a page opened from a random flyer.
- Do not install apps from code links — only from official stores.
- Urgency and threats are a reason to be suspicious, not to pay.
Rules for people placing codes
| Risk | Protection |
|---|---|
| Sticker swap | Print the code directly on the material, not as a separate sticker |
| Distrust of the link | Use a recognisable domain and print it next to the code |
| Outdated code | Check public signage regularly |
| Payment fraud | Name the payment recipient next to the code |
QR Studio creates codes right in your browser and sends your data nowhere. The link in the code goes exactly where you set it — no intermediate servers or redirects.
FAQ
Can a QR code hack a phone?
The code itself is only data. The risk is the site or file it opens, so check the address before you tap.
How can I check a QR code without opening the link?
The camera shows the address before opening. You can also use a scanner app that displays the content without opening it.
Read next
How to scan a QR code on your phoneThe built-in camera is almost always enough. iPhone, Android, codes on your own screen and what to do when scanning fails.
Wi-Fi via QR code: is it safeA QR code is no less secure than a password written on a board by the till. But without a few settings guest Wi-Fi is a risk.
Static or dynamic QR codeThe key question before a print run: will the code still work in a year if you stop paying a service?