Quishing Protection

Check QR Codes Before You Open the Link

Scammers hide links in QR codes on parking meters, restaurant tables, and packages. Ask ZoraSafe to check a QR code and get a clear answer and next steps before you decide whether to open its link.

Get ZoraSafe for QR Checks

Before opening a QR link

How to Scan QR Codes Safely

Why QR Code Scams (Quishing) Are Dangerous

QR codes hide the destination URL, so you cannot see where you are going before you scan. Scammers exploit this by creating fake QR codes that lead to phishing sites, fake payment pages, or malware downloads. These codes appear on parking meters, restaurant tables, event flyers, and even legitimate-looking mailings.

Check 1
Inspect the QR Code
Check if the QR code looks like it has been placed over another code (a sticker on top). Scammers often place fake codes over legitimate ones on parking meters and public postings.
Check 2
Preview the URL Before Visiting
Most phones show a preview of the URL after scanning. Before tapping to visit, check that the domain looks legitimate and matches the expected company.
Check 3
Never Enter Payment Information from a QR Code
Treat an unexpected request for payment or personal information as a warning sign. Use an official app, website, or posted payment method you can verify independently.
Check 4
Verify Payment Apps
If a QR code claims to be for Venmo, PayPal, or another payment app, verify the recipient's username matches the expected person or business before sending money.
Check 5
Report Fake QR Codes
If you find a suspicious QR code on parking meters, public postings, or in the mail, report it to local authorities and the FTC.

User-initiated QR workflow

How ZoraSafe Helps Check QR Codes

Ask ZoraSafe to check a QR code and get a clear answer and next steps before you decide whether to open its link.

Choose Scan QR

Open Ask Zora and select the QR option when you want to check a code.

Review the result

Get a plain-language explanation and next steps before deciding whether to open the link.

Verify the destination

Use an official app, website, or posted contact for unexpected payment or sign-in requests.

Keep the limitation in mind: ZoraSafe helps assess risk; it does not guarantee detection or prevention.

Check QR Codes on iPhone

Product preview unavailable. The description beside it explains this feature.

Current Ask Zora menu showing the user-initiated Scan QR option.

Trusted sources

Official QR-code scam guidance

Use FTC guidance to recognize QR-code scams and report fraudulent codes or destinations. A check does not certify that a destination is safe.

Federal Trade CommissionRecognize harmful QR-code linksRead official guidance about checking QR codes and the sites they open.Visit official resource Federal Trade CommissionReport consumer fraudReport a fraudulent QR code, website, or payment request.Visit official resource

In immediate danger? Contact 911. ZoraSafe does not replace your bank, law enforcement, emergency services, or professional legal or financial advice.

Keep learning

Browse the Scam Protection hub

Text Scam ProtectionCheck suspicious text messages and links

Bank Text Scam CheckerVerify suspicious bank texts through official channels

Common questions

Frequently Asked Questions

What is quishing?

Quishing is a type of phishing attack that uses QR codes to hide malicious links. Scammers place fake QR codes on parking meters, restaurant tables, event flyers, and in mailings to trick you into visiting phishing sites or fake payment pages.

How can I tell if a QR code is safe?

Inspect the code for signs of tampering (stickers placed over legitimate codes), preview the URL before visiting to check the domain looks legitimate, and be suspicious of QR codes that ask for payment or personal information immediately after scanning.

Can QR codes install malware on my phone?

Scanning a QR code itself does not install malware, but the code can take you to a website that attempts to install malicious software or trick you into downloading a fake app. Always preview the URL and avoid downloading anything from an unexpected QR code.

What should I do if I scanned a malicious QR code?

If you scanned a code, pause before opening its link or entering information. If you entered login or payment information, contact the relevant account provider or bank through an official channel and change affected credentials.

Where are QR code scams most common?

Common locations include parking meters (fake codes placed over legitimate payment QR codes), restaurant tables (fake menu codes), event flyers, package delivery notices, and cryptocurrency ATMs. Scammers target high-traffic public spaces where people quickly scan without inspecting the code.