QR code scam guide

QR Code Scam Australia: Check Before You Scan

A QR code hides a website link. Before scanning, think about where the code came from and what the page asks you to do.

Plain-English scam safety for Australians. Check before you click, pay, share a code, or let someone control your device.

Comic-style scam safety image reminding families to stop, check and ask before scanning or clicking.

Quick answer: QR code equals hidden link

Treat a QR code like a link you cannot read yet. It might be safe, but it can also send you to a fake payment, login or app-install page.

High-risk places

Be careful with QR stickers in public places, payment signs, unexpected letters, parcel notices, toll messages and posters that are easy to tamper with.

Safer habit

Use the official app or type the website yourself for banking, tolls, parking, deliveries and government services. Do not enter passwords or card details just because the QR page looks official.

Use the free checker before the next step

These free tools are a first check only. They are not a guarantee. Do not enter passwords, one-time codes, card numbers or identity documents into a checker.

Can a QR code be changed by a scammer?

Yes. A scammer may place a sticker over a real code or send a QR code in a fake message.

Is scanning the QR code itself always dangerous?

The main risk is what happens next: payment, login, app install or personal information requests.

What if I entered details?

Change affected passwords from a safe device, contact your bank if payment details were used, and save evidence.

Not sure where to start?

Open the Scam Safety Hub and choose the checker that matches what happened.