Home Finance Health Math Converters Text Tools AI & Media Everyday Developer Tools Business Tools Blog About Contact

QR Safety Scan

Upload or snap a QR code and see what it really hides — decoded on your device, never opened, with scam-pattern checks before you tap.

100% private — decoded on your device, the link is never opened

Scan a QR code without risk

Drop a QR image here, click to browse, or snap a photo Decoded in your browser — the link inside is shown, never opened. Decoder downloads once (needs internet the first time).

Add a QR code to begin
Found a code on a parking meter, parcel slip or flyer? Check it here first — it takes seconds.

How it works

1

Upload the QR code

Drop a screenshot or photo of the QR code, or snap it with your phone camera. Decoding runs entirely on your device — the image is never uploaded anywhere.

2

Read the hidden data

The tool extracts the raw text or URL inside the code and displays it as plain text. Nothing is clicked, previewed or opened — a malicious page can never load.

3

Review the risk flags

Heuristic checks look for quishing patterns — fake lookalike domains, IP addresses, hidden shorteners, non-HTTPS links — and you get a VirusTotal link for a deeper reputation check.

Why scanning QR codes blind is risky

Quishing — phishing delivered through QR codes — has exploded because QR codes hide their destination. In an email you can hover a link and spot a scam; with a QR code, your phone just opens whatever is encoded. Attackers exploit this by pasting their own QR stickers over legitimate ones on parking meters, EV chargers, restaurant tables and parcel-delivery notices, or by mailing fake "package redelivery" codes.

A few seconds of checking defeats most of these scams. Scam QR codes overwhelmingly reuse the same tricks: domains that look like a bank or delivery company but use lookalike characters (paypaI with a capital i, or Cyrillic letters), raw IP addresses instead of domain names, URL shorteners that conceal the real site, and plain HTTP pages that harvest card details without encryption.

This tool is the pause button between scanning and tapping. It shows you exactly what the code contains and flags those known patterns — while never opening the link itself, which is the one thing that would actually put you at risk.

Guides for This Tool

How to Check a QR Code Is Safe Before You Scan It: Quishing, Lookalikes and the 10-Second Check

A QR code hides its destination by design — that is exactly what scammers exploit. Decode it on your device, read the link as plain text, check the scam patterns, and only then decide whether to tap.

Frequently asked questions

Quishing is phishing via QR code. Attackers stick fake QR codes over real ones (on parking meters, restaurant tables, parcel notices) or send them by email. Your phone opens whatever link is encoded, and because the URL is hidden behind the code, you can't spot the scam the way you can in an email.
No — deliberately not. QR Safety Scan only reads the data inside the QR code and shows it to you as plain text. It never visits, previews, or opens the link, so a malicious page can't load or run anything on your device.
It checks for punycode or Unicode lookalike domains, IP-literal addresses instead of domain names, known URL shorteners that hide the destination, user@host redirect tricks, non-HTTPS links, high-abuse top-level domains, and URLs hidden inside descriptive text.
No. "No red flags found" is not a certificate of safety — it only means none of the known scam patterns matched. A brand-new phishing site can look perfectly normal to these checks. Treat any unexpected QR code as untrusted, and use the VirusTotal link for a deeper reputation check before visiting.
No. Decoding happens entirely in your browser — the image is read into memory, decoded, and never sent to any server. The QR decoder library is downloaded once from a CDN the first time you use the tool; your photos stay on your device.

Related Tools

Passport Photo Maker — Free ID Photos & Print

Make compliant passport & ID photos at home: country size presets, head-size guides, 4×6 print sheet. Free — no $9…

Beat Tag Dropper

Drop your producer tag over any beat automatically: set the interval, fades and ducking, preview the protected beat…

Dialogue Analyzer

Paste a story chapter for a free dialogue report: dialogue-vs-narration ratio, speech-tag census, adverb check and…

Audio Sync Fix — Fix Lip-Sync Drift | Free Online

Fix out-of-sync video audio in your browser. Slide the offset until lips match, A/B preview original vs fixed, export a…

Silence Chapters — Split Audio by Pauses

Split podcasts and meetings into chapters in your browser. Detects silences, shows a pause map, exports clips as…

Video QC Checker

Scan your video for black frames, frozen frames, dead audio and delivery-spec issues before upload. Free in-browser QC…