Information for Consumers

Unless you absolutely trust and know where a QR code is sending you, and/or you can review the URL the code will send you to if the action was executed, you should avoid scanning QR codes. Even going to an online destination that has was built under nefarious and criminal intent can cause you harm, even if you don’t click on anything further, or input anything.

Since QR codes give you a URL to automatically go to in your mobile device browser, you could try to find what the URL should be and then manually type it in after judging it to be legitimate.

Are there any alternatives to scanning the code? For example, instead of using a restaurant’s displayed QR code for their menu, ask for a paper menu — if they don’t not have any, ask them to write down the URL of the menu so you can enter it in to the browser yourself.

Most online content for a business is available via search engines. If you cannot get the legitimate URL for a needed resource, try a web search.

If a displayed QR code looks suspicious – for example, a QR code on a sticker placed over another code, or simply stuck onto a surface where it looks unplanned — say something to the business-in-question.