How-to guide
QR code scams: when a quick scan is a trap
QR codes are everywhere — and that's exactly why scammers love them. A sticker over a real code, or a code in a phishing email, can send you to a fake payment or login page in one tap. It's called "quishing" (QR + phishing).
Where fake QR codes show up
- Stickers placed over real codes on parking meters and EV chargers.
- Emails and letters claiming to be from a bank, toll agency, or delivery service.
- Flyers, posters, and "you've won" mailers.
- Restaurant menus and payment stands that have been tampered with.
How to scan safely
Before you tap, preview the URL your phone shows and check it's the real domain. Don't enter payment or login details on a page you reached by scanning. When unsure, paste the link into Scam Doctor first.
Frequently asked questions
Can a QR code itself give you a virus?
The code just contains a link — the risk is the website it opens. Preview the URL before tapping and never enter credentials or payment on a page reached via an unexpected QR code.
How do I check a QR code link?
Most phones show the URL before opening it. Verify the domain is the real company, or paste the link into Scam Doctor for a verdict.