susQR QR code safety scanner

Is this QR code safe?

Upload a photo of it. We open the link so you don't have to, follow every redirect, and check the destination against 90+ security vendors, DNS blocklists, and domain age. Verdict in about a second. Free, no app.

Prefer live camera scanning? Use the camera scanner.

How to tell if a QR code is safe

The black-and-white pattern tells you nothing; a code for a restaurant menu and a code for a card-stealing page look identical. What matters is the link inside it. Here is what we look at, and what you can check yourself in a pinch.

1. Where it really goes Scam links bounce through shorteners and redirects. We follow the whole chain and show the final domain.
2. Who has flagged it 90+ antivirus and reputation vendors via VirusTotal, plus the URLhaus malware database.
3. DNS blocklists Cloudflare 1.1.1.2 and Quad9 refuse to resolve known malware and phishing domains. We ask them.
4. How old the domain is Phishing domains are usually days old. We look up the registration date.
5. Lookalikes and tricks Misspelled brands, raw IP addresses, HTTP without encryption, and "verify your account" wording.
6. Physical tampering Only you can check this: is the code a sticker placed over another one? On a parking meter or gas pump, assume yes.

The QR codes that are almost never safe

See what is happening near you on the QR scam map and our city-by-city incident pages.

Frequently asked

Is this QR code safe to scan?

You can't tell by looking. Photograph it and check it above: we decode the link without opening it, trace the redirects, and run the reputation checks. If the verdict says do not visit, don't.

Can a QR code hack my phone just by scanning it?

No. Scanning only decodes text. The harm comes after you tap: a fake login page, a card form, or a download. Checking first removes that step.

What if I already scanned it?

Close the page. If you typed a password, change it and turn on two-factor authentication. If you entered card details, call your bank. Then report it at reportfraud.ftc.gov. Full steps here.

Is this free?

Yes. No app, no account, any browser. Signing in is optional and only keeps a history of your checks.

How is this different from my phone's camera?

Your camera shows a shortened preview and then opens the link with no checks. susQR shows the final destination and what 90+ vendors think of it first. Comparison.

Related: How to safely scan a QR code · 7-step safety checklist · What is quishing? · 10 common QR code scams