QR Code Safety Tips: Scan, Pay and Share More Safely

A QR code hides its content inside a visual pattern, so you cannot understand the destination by looking at it alone. Most codes are useful, but a malicious code can lead to a fake login, unwanted download or incorrect payment recipient. A few checks reduce the risk.

Before scanning

Inspect a physical code for signs of tampering, especially a sticker placed over an original restaurant, parking or payment code. Prefer codes displayed by a trusted business or known person.

Read the link preview before opening it. Watch for misspellings, unusual subdomains and shortened links. Use extra care if a page asks for a password, card details, one-time password, app installation or urgent payment.

UPI payment safety

Confirm the recipient name and amount inside the UPI app before authorizing payment. Enter your PIN only inside the official payment flow. You do not need to scan a stranger’s code or enter a PIN simply to receive money. Verify completed payments in your own app or bank account.

Wi-Fi safety

A Wi-Fi code contains access details that may be readable by anyone who has the image. Do not publish a private network code. Businesses should offer a separate guest network and change its password when access should be revoked.

For businesses publishing codes

Print a readable destination or business name nearby. Use HTTPS links, keep websites updated and avoid unexpected redirects. Check public codes for replacement stickers or damage. Disclose relevant analytics in the privacy policy.

After a suspicious scan

Close the page without entering information or installing anything. If you submitted a password, change it from the official site and enable multi-factor authentication. If a payment account may be affected, contact the bank or provider through its official support channel.