Are QR Codes Safe? What to Know Before You Scan [2026]
The Short Answer
QR codes are mostly safe. A QR code is just an encoded link, so the risk is not the code format itself - it is where the code sends you. Not sure about a code you are about to scan? Check it first.
Check a QR code before you scan →"Are QR codes safe to scan?" is one of the most common questions people ask before pointing their phone at a code. The honest answer: QR codes themselves are simply a way to encode a link or a piece of text, so the code format is not dangerous. The real risk is the destination - the website or action the code triggers. Most QR codes are safe, butquishing (QR phishing) has risen sharply, so a few simple habits go a long way.
Are QR Codes Safe to Use? The Direct Answer
Yes, QR codes are safe to use in the overwhelming majority of cases. Scanning a code and previewing where it leads is generally low-risk - the code cannot install anything or steal data on its own. What matters is what happens next. Because a QR code hides its destination behind a pattern of squares, you cannot see the link the way you would read a normal web address, and scammers take advantage of that. Understanding the difference between the code and its destination is the key to scanning safely.
What Can Actually Go Wrong
When a QR code is used maliciously, the harm comes from the destination and what it tricks you into doing. The most common problems include:
- A malicious destination: The code opens a harmful or spoofed website designed to look legitimate.
- Credential-harvesting pages: A fake login screen (bank, email, delivery service) captures your username and password when you type them in.
- Fake payment pages: A bogus "pay now" or "parking fee" page collects your card details or reroutes a payment to a scammer.
- Tampered or stickered physical codes: A criminal prints a QR sticker and places it over a genuine code on a parking meter, poster, or restaurant table so the real code is hidden.
All of these fall under quishing, the term for QR-code-based phishing. For a broader look at real-world examples, see our guide tocommon QR code scams.
When QR Codes Are Safe vs. Risky
Not every QR code deserves the same level of trust. Context tells you a lot before you ever scan.
Generally safe
- Codes you generated yourself, where you already know the destination.
- Codes from known, reputable brands printed directly on official packaging, signage, or receipts.
- Codes in a context you initiated - for example, a payment code you asked a trusted cashier to show you.
Treat with caution
- Unsolicited codes in texts, emails, or DMs, especially with urgent wording like "verify now" or "account suspended."
- Stickers placed over an existing code on parking meters, posters, or tables.
- Codes in unexpected physical mail claiming to be from a bank, delivery service, or government agency.
- Any code that leads to a login or payment page you did not go looking for.
Rule of thumb: The safety of a QR code tracks the safety of the link behind it. If you would be cautious clicking that link in an email, be equally cautious scanning it.
How to Scan QR Codes Safely
These habits will not make scanning guaranteed safe, but they help you spot the most common traps and reduce your risk:
- Preview the URL before opening it. Most phone cameras show the full web address first. Read it before you tap. If it is hidden behind a shortener or looks nothing like the brand you expect, stop.
- Look for physical tampering. Check whether the code is a sticker sitting on top of another code. Peel-and-stick QR codes on public surfaces are a red flag.
- Check the domain carefully. Scammers use look-alike domains (like "paypa1" or "secure-login-verify"). Confirm the domain matches the real organization, not just similar wording.
- Never enter credentials or payment details from an unexpected scan. No legitimate service needs you to log in or pay through a random scanned code. When in doubt, navigate to the site yourself instead.
- Use a safety checker. If you are unsure, run the link through aQR code safety checker to inspect the destination before you open it.
Not sure about a code?
Paste the link or scan result into our free checker to see where it really leads before you open it. It helps you spot suspicious destinations and reduce your risk.
Check a QR code before you scan →Are the QR Codes You Create Safe?
If you make your own QR codes, they are as safe as the links you put in them, and the people scanning them are trusting you the same way. Use a generator you control, point codes at secure (https) pages you own, and print them so they cannot easily be covered by a sticker. That keeps your audience safe and your codes trustworthy.
Create a QR code you control
Generate QR codes that point exactly where you intend - no surprises for the people who scan them.
Create a QR code you control →Frequently Asked Questions
Are QR codes safe to scan?
In most cases, yes. A QR code is just an encoded link or piece of text, so scanning one and previewing where it leads is generally low-risk. The danger comes from the destination - a malicious site, a fake login page, or a bogus payment page. Previewing the URL before you open it and checking the domain help you spot problems and reduce your risk.
Can a QR code steal my information?
A QR code cannot steal information on its own - it only stores data like a web address. Information theft happens after you follow the link and voluntarily enter details on the page it opens, such as a password, card number, or login. Avoid entering credentials or payment details on any page you reached by scanning an unexpected code.
Can scanning a QR code give me a virus?
Simply scanning a QR code will not install a virus by itself. Risk appears if the code sends you to a page that prompts you to download an app or file from outside an official app store, or to grant unusual permissions. Stick to official app stores and be cautious with any download you did not expect.
How can I tell if a QR code is safe?
Before opening the link, preview the full URL your scanner shows, check that the domain matches the brand you expect, and look for a physical sticker placed over an original code. No single check makes scanning guaranteed safe, but together these habits help you spot the most common scams. You can also run the link through aQR code safety checker.
Are QR codes on restaurant tables safe?
Restaurant menu QR codes are usually fine, but they are a known target for tampering because they sit in public. Before scanning, check that the code is printed directly on the menu or table and is not a sticker placed on top of another code. If the link leads anywhere other than the restaurant's menu or ordering page, do not enter any personal or payment details.
Scan with confidence
Most QR codes are safe - but when a code looks unexpected or too good to be true, check the destination first. It only takes a few seconds to reduce your risk.
Related Pages
What Is Quishing? QR Code Phishing Explained
The complete guide to quishing - how QR code phishing works and how to protect yourself.
Common QR Code Scams to Watch For
Real-world QR code scams and the warning signs that help you avoid them.
QR Code Safety Checker
Check where a QR code really leads before you open it and reduce your risk.