QR Code Safety: How to Avoid Scams and Create Trustworthy Codes
QR codes are safe in themselves, but they can lead to bad links. Scams that use fake codes are sometimes called "quishing".
When you scan
- Read the link before you open it. Phone cameras show the address first. Check that it matches what you expect.
- Be careful with stickers. A code stuck over another code, on a parking meter or poster, may be fake.
- Do not enter passwords or card details on a page you reached from an unexpected code without checking the address.
- Be wary of urgent messages such as "pay now" or "your account is locked".
- Do not install apps that a code forces you to download from an unknown site.
When you create codes
- Link to your own domain so people can see where they are going.
- Use HTTPS links.
- Add a short label near the code, such as "Scan to view our menu", so people know what to expect.
- Check printed codes regularly to make sure no one has stuck something over them.
Do not hide secrets in codes
Static codes contain their content in plain form. Anyone with the image can read it, so never encode passwords or private data, and treat Wi-Fi codes as shareable. More in our Wi-Fi guide.
More guides
- QR Code Size and Print Guide: What Actually Scans
- How to Make a Wi-Fi QR Code (and Share It Safely)
- Static vs Dynamic QR Codes: Which Do You Need?
- QR Code Not Scanning? 9 Fixes That Work
- How to Add a Logo to a QR Code Without Breaking It
- vCard QR Codes: Put Your Contact Details on a Business Card
- How to Make a QR Code Menu for a Restaurant or Cafe