Skip to main content
Phishing & Scams·Updated 2026-10-21

Are QR codes safe to scan?

Short answer

A QR code is just a link, so it is as safe as the website it opens. Check the address your camera shows before opening it, and be cautious with codes on stickers placed over parking meters or posters, or codes sent by email asking you to sign in.

The details

Attackers use QR codes because many email filters do not read them and because a phone screen hides the full address. A code that leads to a sign-in page or a payment form deserves the same suspicion as any unexpected link.

Where possible, pay or sign in through the official app instead of a scanned code.

What to do

  • Preview the URL before opening it.
  • Avoid codes that look stuck on top of another code.
  • Never enter passwords or card details from a code you received unexpectedly.

Useful next reads and tools

Terms explained

Phishing
Phishing is a fraudulent message, usually email, that impersonates a trusted sender to trick people into revealing credentials, paying money or running malware.

Sources

Related questions