Are QR Codes Safe? How to Scan Without Risk

The short answer

Scanning a QR code is usually safe, but opening the link inside it is where the risk is. A QR code can contain a web address, a Wi-Fi login, a phone number, an email, a contact card or a payment request. Look at what the code contains before you act on it, and treat it like a link in a message from a stranger.

Read the address a scanner shows you before you tap Open. If it looks wrong, close it.

What is inside a QR code?

A QR code stores plain text in a pattern of squares. What your phone does depends on how that text starts.

Content	What your phone offers
A web address (https://…)	Open it in the browser
Wi-Fi details	Join the network
A phone number or SMS	Call or start a message
An email address	Start an email
A contact card	Save the contact
A payment link	Open a payment app

Warning signs of a bad QR code

A sticker placed over a printed code, for example on a parking meter or a restaurant table.
A web address that is slightly misspelled, very long or uses an unfamiliar domain.
A code that arrives in an unexpected email or message and asks you to log in or pay urgently.
A page that asks for passwords, card numbers or one-time codes straight after scanning.
A request to install an app from outside the official store.

A safe scanning routine

Check that the code is genuine: is it printed in place, or a sticker on top of something else?
Use a scanner that shows you the content before opening it.
Read the web address. Make sure it starts with https:// and the domain is the one you expect.
Never enter a password or payment details on a page you reached from an unsolicited code.
For payments, check the name and amount in your payment app before you confirm.
If in doubt, type the website address yourself instead of scanning.

Creating QR codes people can trust

If you make QR codes for a business, event or flyer, use a short, clear address on your own domain so people recognise it, add a few words of text next to the code saying where it leads, and print it where it cannot easily be covered by a sticker. A static QR code that stores the address directly never depends on a third-party redirect service.

You can make free QR codes for websites, Wi-Fi, contacts, email and more with the QR code generator on this site, or use the QR and Document Scanner app for Android to scan and create codes on your phone.

Frequently asked questions

Can scanning a QR code hack my phone?

Scanning alone is very unlikely to harm your phone. The risk comes from opening a malicious link, installing a fake app or entering your details on a fake page afterwards.

How can I tell if a QR code is fake?

Look for stickers covering the original, check the web address that appears before you open it, and be wary of codes in unexpected messages asking for urgent action.

Is it safe to scan a QR code for a menu or Wi-Fi?

Usually yes, if the code is printed in place. Check the address of a menu link, and only join Wi-Fi networks you trust.

Do QR codes expire?

A static QR code stores its content directly and does not expire. Codes that point to a redirect service may stop working if that service closes.

What is the best free QR code scanner for Android?

Choose one that shows the content before opening it. The QR and Document Scanner app from Robince Studio is free for Android and also scans documents to PDF.

Try these tools

QR Code Generator

Create QR codes for websites, Wi-Fi, vCard contacts, WhatsApp, email, SMS, UPI payments, locations and calendar events. Free PNG and SVG, no expiry.

Open tool

Barcode Generator

Create barcodes in Code 128, EAN-13, EAN-8, UPC-A, Code 39, Code 93, ITF, Codabar, MSI and more, with automatic check digits. Free PNG and SVG download, made in your browser.

Open tool