Scan with camera
Point your camera at a QR code for a direct, live safety check.
QR Code Security Scanner
Images and decoded content stay in your browser. The checker never visits the destination.
Private QR safety check
Check a QR code before you trust it
Scan with your camera or upload a QR image. See exactly what it contains and get a clear, explainable risk check before you open a link or approve an action.
Images and decoded content stay in your browser. The checker never visits the destination.
How it works
A QR code scanner with a safety check
The checker separates decoding from opening, so you can inspect the hidden payload first.
Scan or upload
Use the rear camera for a live scan or select a saved QR code image.
Reveal the payload
The browser decodes the exact URL, payment request, Wi-Fi setup, contact, message, or text.
Review the risk signals
Readable rules flag traits such as shortened links, raw IP addresses, hidden credentials, unusual ports, encoded domains, and downloads.
URL risk signals
What the QR security checker looks for
Hidden destinations
Shortened links, nested redirect URLs, many subdomains, and long hostnames can make the true destination harder to identify.
Deceptive link structure
User information before a hostname, numeric IP addresses, Punycode, heavy encoding, and urgent account language receive extra scrutiny.
Risky actions
Executable downloads, payment requests, open Wi-Fi networks, and custom app actions are surfaced before you continue.
Connection basics
The report shows HTTP versus HTTPS, destination domain, port, path, and parameters in a readable layout.
Decoded details
See what is inside a QR code
QR codes can contain more than web links. The scanner identifies common formats and displays useful fields without automatically performing the action.
Web links and redirects
Reveal the complete destination, including the real hostname, path, query parameters, and visible redirect targets.
Payments and Wi-Fi
Inspect available recipient, amount, currency, network name, and security details before approving a payment or joining a network.
Calls, messages, and contacts
Preview phone numbers, SMS text, email recipients, and contact-card fields before handing them to another app.
Before you continue
How to tell if a QR code is safe
Check the physical source
Look for a sticker placed over the original code and be cautious with unexpected QR codes in email or messages.
Read the actual domain
Focus on the destination hostname—not familiar brand words elsewhere in a long URL.
Verify sensitive requests elsewhere
Open the official app or type the known website yourself for passwords, payments, account recovery, or urgent notices.
Do not install unexpected files
A menu, parking meter, invoice, or sign-in QR code should not normally download an app or executable file.
Frequently asked questions
QR code security scanner FAQ
How can I check if a QR code is safe?
Scan it here without opening the result. Check the decoded destination, risk score, and each warning. Also confirm that the code came from a source you trust.
Can a QR code contain a phishing link?
Yes. A QR code can hide a link to a fake sign-in, payment, or delivery page. This checker reveals the full URL and highlights suspicious structural traits before you visit it.
Does this scanner open or visit the link?
No. Decoding and rule-based analysis happen locally in your browser. A link opens only if you deliberately select Open link.
Does a low risk score mean the QR code is definitely safe?
No. A newly created or well-disguised malicious website may have a normal-looking URL. Treat the score as an explainable screening result, not a guarantee.
What is quishing?
Quishing is phishing delivered through a QR code. The code hides the destination until it is scanned, which can make a fraudulent link harder to inspect.
Are uploaded QR images stored?
No. The selected image and decoded value are processed in your browser and are not uploaded to the DevsLoad server.