How to Spot Fake QR Codes – Keep Calculator

QR codes are everywhere—on menus, posters, product packaging, and payment terminals. While they make life convenient, they also give scammers a way to redirect you to malicious websites or trick you into downloading malware. This guide teaches you how to inspect a QR code before scanning it, so you can avoid phishing, fake payments, and other common QR-based scams.

What You’ll Need

A smartphone or tablet with a camera (to test the QR code safely)
A QR scanner app (most phones have one built into the camera)
A magnifying glass (optional, for inspecting printed codes)
Access to the internet (to verify the URL)

Step-by-Step

Look before you scan. Examine the QR code itself. Check for any stickers placed over the original code. Scammers often print a fake QR code on a sticky label and paste it over a legitimate one—especially on parking meters, restaurant tables, or public kiosks. If the edges are peeling, misaligned, or look glossy over a matte surface, don’t scan it.
Check the URL before opening it. When you scan a QR code, your phone will show a preview of the link (or ask permission to open it). Do not just tap it. Read the URL carefully. Look for misspellings, extra characters, or unusual domain names (e.g., “amaz0n.com” instead of “amazon.com”). If the link looks suspicious, don’t open it.
Use a QR scanner that shows the link. If your camera app doesn’t show the URL, use a dedicated QR scanner app that displays the destination before opening it. Many apps also have a “safety check” feature that flags known malicious domains.
Check for shortened URLs. QR codes often contain shortened links (like bit.ly or tinyurl.com) to save space. But these hide the true destination. If you see a shortened URL, use a link expander website (like checkshorturl.com) to see where it really goes before you visit.
Inspect the code for tampering. Look closely at the three square “finders” (the large squares in the corners). In a genuine QR code, they are solid and well-defined. If they look distorted, have extra dots, or are partially covered, the code may be altered.
Verify the source. If the QR code is on a poster, menu, or product, check if the company’s official website or phone number matches the URL in the code. If the code claims to be from a bank or government agency, call the official number (not the one in the QR code) to confirm.
Test with a safe method. If you must scan a suspicious code, use a device that is not linked to your bank accounts or important data. You can also use a QR code generator/decoder online that lets you paste the image and shows the URL without opening it.
After scanning, check the page. If you do open the link, look at the website. Is it asking for personal information? Is it poorly designed? Does the URL match the domain you expected? If anything feels off, close the tab immediately.

Common Mistakes

Assuming all QR codes are safe. Just because a QR code is printed on a poster or a business card doesn’t mean it’s legitimate. Anyone can print a QR code.
Ignoring the URL preview. Many people tap the link without reading it. That’s exactly what scammers rely on.
Not checking for stickers. A fake sticker over a real code is the most common tampering method. Always run your finger over the code to feel for raised edges.
Using a generic scanner that auto-opens. Some scanner apps automatically open the URL without showing it first. That defeats the purpose of checking.

Tips

If you’re unsure, don’t scan. It’s better to miss a discount than to compromise your data.
For payments, use the official app of the service (e.g., your bank’s app) instead of scanning a QR code on a terminal.
On iPhones, the camera shows a notification with the link—tap and hold to preview the URL before opening.
On Android, some camera apps have a setting to “show URL before opening”—enable it.
If you receive a QR code via email or text, treat it like a suspicious link—verify the sender first.

Troubleshooting

What if I already scanned a fake QR code?

If you entered any passwords or credit card information, change those passwords immediately and contact your bank or credit card company.
If you downloaded an app from the link, delete it and run a security scan on your phone.
If you’re worried about malware, reset your phone to factory settings as a last resort.

What if the QR code won’t scan?

It might be damaged or poorly printed. Try moving your phone closer or farther away, and adjust the lighting.
If it’s on a screen, increase the brightness.
If it still won’t scan, it could be a fake with corrupted data—don’t try to force it.

Frequently Asked Questions

Can a QR code contain a virus?

No, a QR code itself is just text. But it can link to a website that downloads malware onto your device. That’s why you should always check the URL first.

Are all QR codes with logos fake?

No. Many legitimate companies put their logo in the center of a QR code. It’s not a sign of fakery by itself, but it can make the code harder to scan, so check the URL carefully.

Can a QR code steal my personal information?

Only if you enter information on the page it opens. The QR code can’t read your phone’s data directly. The danger is in the phishing website it leads to.

How can I tell if a QR code is from a real company?

Check the URL for the company’s official domain. If the code is on a product, compare it with the company’s website. When in doubt, contact the company directly using a phone number you know is correct.

What should I do if I see a suspicious QR code in public?

Report it to the business or venue management if possible. You can also take a photo and report it to your local cybercrime unit or the platform hosting the code (like a payment service).

Is it safe to scan a QR code from a friend?

It depends. If your friend sent it, ask them what it’s for. If they didn’t intend to send it, it could be a scam. Always check the URL before opening.

Method: the standard formula for this calculation, rounded as each result states. See how the calculators work or report an error.

More cards in this drawer

The whole Numbers and Powers drawer →