Quick answer: QR code equals hidden link
Treat a QR code like a link you cannot read yet. It might be safe, but it can also send you to a fake payment, login or app-install page.
High-risk places
Be careful with QR stickers in public places, payment signs, unexpected letters, parcel notices, toll messages and posters that are easy to tamper with.
Safer habit
Use the official app or type the website yourself for banking, tolls, parking, deliveries and government services. Do not enter passwords or card details just because the QR page looks official.
Use the free checker before the next step
These free tools are a first check only. They are not a guarantee. Do not enter passwords, one-time codes, card numbers or identity documents into a checker.
Benefits and practical outcomes
Use these outcomes as a practical check on whether the advice is making the situation clearer and easier to manage.
Slower decisions under pressure
A short verification pause can stop urgency from deciding what you click, pay or share.
Independent verification
Checking through an official app, known website or saved contact reduces reliance on the suspicious message itself.
Better evidence
Keeping messages, receipts and timestamps makes it easier to explain what happened if you need help.
Clear escalation
A simple next-step plan helps you know when to contact a bank, platform, provider or hands-on support.
Example: urgency plus a link
A message says action is required immediately and includes a link for payment or sign-in. The recipient does not use the link; they open the organisation’s official app or known website and verify whether any real alert exists.
Outcome: the decision is separated from the pressure created by the message.
Can a QR code be changed by a scammer?
Yes. A scammer may place a sticker over a real code or send a QR code in a fake message.
Is scanning the QR code itself always dangerous?
The main risk is what happens next: payment, login, app install or personal information requests.
What if I entered details?
Change affected passwords from a safe device, contact your bank if payment details were used, and save evidence.