How to Scan a QR Code Safely Before You Open It
QR codes hide their destination until the moment you scan. That is convenient on a poster and risky in a message from an unknown number: the code can point anywhere, and the printed label rarely tells you where.
A scanner that decodes the code and shows you the content before opening it gives you a chance to judge the link on its merits. QR Scanner reads the code with your camera and displays what it holds, so the next step is your decision rather than an automatic redirect.
Quick answer
Scan with a tool that shows the decoded text or URL first, then open it only if the address is one you recognise. A QR code cannot install anything by itself; the risk sits in the page it opens or the action it asks you to take. Treat payment requests, login prompts and instructions to install an app with particular care.
What a QR code can contain
Most codes hold a URL, but the format allows plain text, Wi-Fi credentials, contact details, an email address or a phone number. The code is just a container. Reading it does not open the link; acting on it is where problems start.
That distinction matters when someone insists you scan a code to “verify” an account or receive a refund. The scanner can tell you that the payload is a URL, but not whether the site behind it is honest. You still have to check the domain and the context.
A routine that keeps you out of trouble
Use the same short sequence each time:
- Scan the code in the page and read the preview without opening it.
- Check the domain character by character, especially on a small screen. Look-alike spellings and unusual endings are common.
- Be wary of shortened links, which hide the final address. If a shortener appears, expand it or open it in a separate tab and inspect the address bar before typing anything.
- Close the page if it asks for a password, card details or a one-time code that arrived by message. Legitimate services rarely ask you to reach them through an unexpected QR code.
Physical codes deserve a second look too. A sticker placed over a restaurant menu or a car park sign can cover the original code. If the label peels at the corner or the code sits on a different material from the sign, scan with suspicion or not at all.
Check the code before you share it
If you make codes yourself, preview them before printing. A URL QR Generator lets you test the destination and confirm the address is correct; a Wi-Fi QR Generator helps you check that guests will join the right network rather than a similarly named one. The same habit works in both directions: read first, act second.
In the browser, decoding runs on your device and the camera image is not uploaded. The code’s content is only as safe as the page it points to, so the preview is the important part.
When a code arrives unexpectedly, scan it with QR Scanner, read the payload, and only then decide whether the destination deserves your trust. If anything about the address or the request feels off, stop there.
Common questions
What can a QR code actually contain?
Most codes hold a web address, but the format also allows plain text, Wi-Fi credentials, contact details, an email address or a phone number. The code is only a container: reading it does not open anything. Problems start when you act on the content, so check what the code holds before opening it.
How can I tell if a QR code is safe to open?
Scan it with a tool that shows the decoded text or URL without opening it, then check the domain character by character. Be wary of shortened links and look-alike spellings. Close the page if it asks for a password, card details or a one-time code sent by message, and inspect any physical code for signs it was stuck over the original.
Does scanning a QR code upload my camera image?
No. In the browser tool described here, decoding runs on your device and the camera image is not uploaded. Only the code's decoded content is revealed, and the destination it points to is a separate risk. The preview lets you judge the link yourself rather than being redirected automatically.