Scam Message Checker

QR Code scam checker

QR-code scams ("quishing") hide a malicious link inside a code. Paste the link the code points to before opening it.

Check message privately

Runs in your browser. No login. Message not stored.

Before you paste: remove OTPs, passwords, card numbers, IDs, and private keys.

0 / 10,000 characters

Add more detail (optional)

The link is analysed locally and never opened or visited.

What is it asking for? (tick any)

Your result includes:

  • Risk level
  • Red flags found
  • Safe next steps
  • Recovery guide
  • Reporting options

Your result will appear here

Paste a message and choose Check message to see your safety guidance.

  • A calm risk level
  • Red flags found
  • Safe next steps
  • Official reporting links
  • A family-safe summary

Your pasted message is not shown in shared or printed summaries.

Common QR Code scams

  • Fake parking-meter or toll payment codes
  • Fake restaurant-menu or payment codes
  • Codes that lead to fake login pages
  • Stickers placed over real QR codes in public

Red flags on QR Code

  • A QR code that leads to a login or payment page
  • Stickers that look added on top of an official code
  • Shortened or look-alike destination domains
  • Pressure to scan and pay quickly

Safety tips

  • Preview the link before opening it.
  • Be cautious of QR codes on public surfaces.
  • Type known web addresses yourself instead of scanning.
  • Do not enter card or login details on a QR-linked page.

Frequently asked questions

How do I check a QR Code message for scams?

Paste the QR Code message into the checker on this page. It runs in your browser and shows the red flags, what the message is likely trying to do, and safe next steps.

Is it safe to paste a QR Code message here?

Yes. The message is analysed on your device and is not stored or sent to a server by default. Sensitive details are masked before analysis.

Get scam safety updates

Practical scam alerts, new examples, and simple safety tips. No spam. No sensitive message data.

We only collect your email, optional name, consent, signup page, and time. Never include passwords, OTPs, card details, or sensitive documents. See our privacy policy.