QR Code Safety: How to Avoid Scams and Fake Codes

A QR code hides the address it opens, which scammers can abuse. Sometimes called quishing, it usually means a fake code leading to a look-alike page that asks for logins or payment details. A few habits reduce the risk.

If you are scanning a code

• Read the link preview your phone shows before you tap it.
• Be careful if the address looks odd, misspelled or unrelated to the business.
• Be cautious of codes on stickers that look added over another sign.
• Do not enter passwords or payment details unless you are sure of the site.
• Avoid installing apps from a QR code unless it leads to the official store listing.

If you display codes in your business

• Check your signs regularly to be sure nobody has stuck another code on top.
• Print or laminate codes so stickers are obvious or hard to attach.
• Put the short web address in plain text near the code so people can compare.
• Use your own domain or official store links as the destination.

Use destinations you control

Qrenzo creates static codes that contain your link directly, and it restricts some types, such as Google Maps and app codes, to the official domains. Remember that a QR code is only as trustworthy as the page it opens.

Parking and payments

If you think you have scanned a fake code

• Close the page and do not enter any details.
• If you entered a password, change it right away and enable two-factor authentication.
• If you entered payment details, contact your bank or card provider.
• Report the code to the business or place where you found it.