Is This QR Code Safe? Free Checker
Check a QR code before you open it. Decode the link and see whether it uses the tricks behind QR phishing — lookalike domains, hidden credentials, IP hosts and disguised downloads.
- Free, no sign-up
- Runs in your browser
Result
What this tool does
You cannot read a QR code with your eyes, so the first time you see the address is after your phone has already offered to open it. That gap is the entire mechanism behind the stickers appearing on parking meters, restaurant tables and delivery notices. This closes it: decode first, judge second, open last.
At a glance
| Checks for | Lookalike domains, punycode, hidden redirectors, credentials in the URL, bare IP hosts and risky file types |
|---|---|
| What it does not do | It reads the address as written. It never follows a redirect or opens the page |
| Where it runs | In your browser, on the decoded text alone |
| Cost | Free, no limits on how many you make |
| Sign-up | None. No account, no email address |
How it works
Decode it without opening it
Upload a photo of the code, or paste a link you were sent. Nothing is opened, requested or followed.
See the structural warnings
The address is taken apart: its real host, its registrable domain, and every disguise technique present in it, each explained in plain terms.
Read the verdict as evidence, not permission
A clean result means none of these specific tricks are present. It is not a statement that the site is safe, and the page never presents it as one.
Good to know
- This checks the ADDRESS, not the destination. It has no blocklist, no reputation feed and no ability to fetch the page — everything it reports is derived from the URL itself.
- It cannot follow a shortened link, because that would require a request from a server. When it sees a shortener it says so, which is the honest answer: the destination is hidden.
- A result with no warnings does not mean a site is trustworthy. It means the URL is not disguised. A hostile page on a perfectly ordinary domain is invisible to this and to every tool like it.
- It flags Qrindo’s own dynamic links the same way it flags Bitly’s. A redirect we serve hides its destination exactly as much as anyone else’s.
Need an editable, trackable QR?
A dynamic Qrindo code keeps the same printed image but lets you re-point it any time and tracks every scan, geo, device, and live.
Frequently asked questions
What is quishing?
Phishing delivered by QR code. A sticker goes over the real code on a parking meter, a menu or a notice, and the scan lands on a payment or login page that looks right. It works because the address is unreadable until it is already open.
Can you tell me if a website is dangerous?
No, and we will not pretend to. Judging a site needs a reputation database and a live fetch of the page, neither of which happens here. What this can prove is that an address is dressed up to look like a different one.
How do I spot a tampered QR code in the wild?
Feel the edges: a sticker over a printed code has a lip you can catch with a fingernail. Then check that the code sits inside the original artwork rather than on top of it, and be suspicious of any code that asks for payment or a login on a public surface.
How do I know if a QR code is a scam?
Decode it before you open it and read the domain right to left from the last dot: the real site is the part just before the top-level domain. paypal.com.secure-login.ru is on secure-login.ru, not on PayPal. This page performs that reading for you and flags several other tricks.
What is quishing?
Phishing delivered by QR code. A sticker over a real code on a parking meter or a restaurant table sends people to a payment page that is not the business it appears to be. The printed code hides the address, which is exactly why it works.
Does a clean result mean the link is safe?
No, and the page says so. It checks the shape of the address, not the content of the site, and a brand-new domain with an honest-looking name passes every structural test. Treat a clean result as "no obvious trick", not as an endorsement.
Still not sure about something? Read the full FAQ →
More free QR tools
QR reader
Upload a QR code image, or use your camera, and see exactly what is inside it — decoded, identified and labelled field by field, without opening anything.
Free toolSize calculator
How big should a QR code be? Work out the printed size from the distance it will be scanned at, in millimetres or inches, and see the quiet zone it needs around it.
Free toolPrint checker
Grade a QR design before it goes to press. Checks module-to-background contrast, physical module size, quiet zone and resolution, and says plainly what will fail.
Free toolColour converter
Convert a brand colour between HEX, RGB and CMYK, with the ink coverage a press will see and a verdict on whether the colour is dark enough to build a QR code from.
Free toolUTM builder
Build a properly tagged campaign URL and turn it into a QR code in the same step, so a printed code shows up in your analytics as something other than direct traffic.
Free QR generatorQR generator
Create a free, high-resolution QR code for any link in seconds. Style it with your colours, shapes and logo, then download PNG or SVG. No sign-up, no watermark.
Free QR generatorWiFi QR
Let guests join your WiFi with one scan instead of typing a password. Generate a free WiFi QR code and print it for a café, an office, or a spare room.
GuideDynamic vs static
The full guide to the difference between a code you can change and one you cannot.