Scam Academy
Check a QR code before opening it
A QR code hides its destination until it is decoded. Treat it like a concealed link and inspect the destination first.
Warning signs
- A QR sticker has been placed over another code or sign.
- The code appears in an unexpected invoice, parking notice or login message.
- After scanning, the destination domain is unrelated to the organisation shown nearby.
- The landing page immediately asks for payment, credentials or MFA approval.
What to do
- Decode the QR without opening the destination automatically.
- Compare the decoded host with the organisation’s known official domain.
- If payment is involved, navigate independently to the official service.