How to check if a QR code is safe
A QR code hides the web address it opens. Here is how to check one before you trust it.
Verify › Guides › How to check if a QR code is safe · Last updated 18/10/2026
Why QR codes can be risky
A QR code is just a web address drawn as a picture, so you cannot tell where it goes by looking at it. Scammers take advantage of that. They stick fake codes over real ones on parking signs and pay machines, and put them on posters, flyers, letters and emails. Using a fake QR code to steal money or personal details is sometimes called “quishing”.
Five checks before you open a QR code
- Look at the code itself. Is it a sticker placed over another code, or does it look peeled, bubbled or printed on a different background?
- Read the address your phone shows. Most phone cameras show the link before opening it. The part that matters is the website name just before the first single slash. Extra words, misspellings or a name you do not recognise are warning signs.
- Be wary of pressure. “Pay now”, “your parcel is held” or “last chance” are classic scam tactics.
- Do not enter card details or passwords on a page you reached from a code unless you are sure it is the right organisation.
- Use an official route for payments. For parking, use the operator’s own app or website instead of a code on a sign.
Check a QR code with Verify
Open Verify, choose Scan QR and point your camera at the code, or choose a photo or screenshot. The code is decoded on your own device. Verify then shows the exact address and a red, amber or green answer with a plain-English reason. It combines Google Safe Browsing, how long the website name has existed and tell-tale signs in the address itself. Read how Verify works for more detail.
QR codes checked by Verify
Organisations can register their website and buy verified QR codes. When someone scans a verified code with Verify, it shows exactly where it goes and checks that the page has not changed since it was approved.
If you have already scanned or paid
- Do not enter any more details on the page.
- If you entered card details or made a payment, call your bank straight away using the number on your card, or dial 159 to be connected to many UK banks.
- If you entered a password, change it on the real website and anywhere else you use it.
- Report it. In England, Wales and Northern Ireland use the Report Fraud service (which replaces Action Fraud). In Scotland, call Police Scotland on 101.
Check a QR code, link or phone number
Common questions
Can I get a virus just by scanning a QR code?
Scanning on its own is normally harmless. The risk comes from opening the link, entering details on the page it leads to, or installing something it asks for. Keep your phone up to date and stop if a page asks for something unexpected.
How can I tell if a QR code has been tampered with?
Look for a sticker placed over another code, edges that lift, or a code that does not match the printing around it. If in doubt, do not scan it and use the organisation’s official website or app instead.
Is it safe to pay for parking with a QR code?
Only if you are sure the code is genuine. Fake codes on parking signs and pay machines are a known scam, so check for stickers and consider using the operator’s official app instead.
More guides
Verify gives guidance only and cannot guarantee that any link, code or number is safe. If something feels wrong, trust that feeling and check another way.