Are QR codes safe?
Last updated:
A QR code itself cannot harm your phone. It is just text. The risk is where the link takes you. Read the link before you open it, and never type passwords or card details on a page you did not expect.
Can a QR code have a virus?
No. A QR code is a picture of some text, like a web address. Scanning it does not run anything. Your phone shows you the text and asks what to do.
The danger is the link. A link in a QR code is just like a link in an email. It can lead to a fake website that asks for your password or card number. That trick has a name: quishing (QR phishing).
Common QR code scams
- Stickers over real codes. Someone puts a fake code on top of the real one on a parking meter, a bike rental or a restaurant table. The fake page looks like the real payment page.
- Codes in surprise emails or texts. “Your parcel is waiting.” “Your account is locked.” The code leads to a fake login page.
- Codes on flyers on your car or door that promise a prize or a refund.
Simple checks before you tap
- Read the link your phone shows. Does the website name match what you expect? Look for small spelling tricks.
- Look at the code. Is it a sticker on top of something else? Does it look stuck on later?
- Be careful with payments. For parking or bills, use the official app or type the website yourself.
- Do not log in from a surprise code. If a message says your account has a problem, go to the website or app the normal way.
- Do not install apps from a code unless you trust where the code came from. Get apps from the official app store.
What about Wi‑Fi codes?
A Wi‑Fi code asks your phone to join a network. Your phone shows the network name and asks first. Only join networks you trust, like a friend’s home or a cafe that shows the code at the counter.
Can a QR code be hacked?
The printed code cannot change by itself. But someone can cover it with a new one. And with dynamic codes, whoever controls the short link can change where it goes. With a static code, the link is printed into the code, so it can only change if someone replaces the print.
If you scanned a bad code
- Close the page. Do not enter anything.
- If you typed a password, change it right away, and turn on two-step sign-in.
- If you typed card details, call your bank.
Making codes for others
Help people trust your code:
- Put your brand name or website next to the code.
- Use a short, clear link on your own website.
- Check your printed codes now and then, to make sure no one has stuck something over them.
Make your code
QRVivid is free, with no sign-up. Your code is made on your device, and the link goes straight into the code, so it never expires.