In depth
How to scan QR codes safely
What the scanner recognises, how to spot a fake code and what to check before you open a link.
What the scanner recognises
| Inside the code | What you see |
|---|---|
| Link | The domain in large type, the full address and warnings if the link looks suspicious |
| Wi-Fi | Network name, password and encryption type — the password can be copied |
| vCard or MeCard contact | Name, phone, email and company; the contact is saved as a .vcf file |
| Event | Title, date and place; the event is added to your calendar as an .ics file |
| Email, SMS, phone | The address or number and a button that opens the right app |
| Location and crypto wallet | Coordinates with a map link, or the wallet address to copy |
How to spot a fake code
Scammers stick their own codes over real ones — on parking meters, scooters, bills and posters. Such a code leads to a copy of a bank or payment site. The scanner never opens the link on its own: you see where it goes first.
- Check the domain. Fakes differ by a single letter or an extra word: paypal-secure-pay.com instead of paypal.com.
- Look at the sticker. A code pasted over another one or with uneven edges is a red flag.
- Never enter card details on a page opened from a code in a random place — pay through your banking app instead.
- Mind the warnings: an unencrypted site, an IP address instead of a domain or non-Latin characters in the address.
A code from an official app, receipt or contract is safer than one on a lamppost or in a mass email. When in doubt, type the website address yourself.
If the code will not read
- Crop the photo so the code fills most of the frame.
- Shoot in even light — glare on glossy paper hides modules.
- Hold the phone parallel to the surface: a steep angle distorts the pattern.
- For a code on a screen, take a screenshot — it is sharper than a photo of a monitor.
The scanner tries several scales, inverted colours and boosted contrast, so it reads light codes on dark backgrounds and codes hidden inside pictures too.