Verify suspicious QR codes before you scan.
QR code phishing, or 'Quishing,' is an increasingly common way for scammers to bypass traditional link filters. By embedding malicious URLs inside a QR code, they can lead you directly to a phishing site or malware download on your smartphone.
Security Insight
Public QR codes on parking meters, restaurant menus, and posters are frequently tampered with. Scammers simply stick a new QR code over the legitimate one to redirect payments or harvest login data.
How to spot a QR Code Scam
A QR code is just a visual link. Watch out for these physical and digital red flags before scanning any code in a public or unsolicited context.
The 'Sticker Over' signal
QR Codes in Emails
Unexpected 'Payment Required'
Automatic App Download
What IsThisSpam checks before you trust a sender
Quick verdicts are useful, but the real value is understanding why something looks safe, uncertain, or risky.
Mismatched Domain Names
When you scan a code, your phone shows a preview of the URL. If the URL doesn't match the brand or service you expect, cancel immediately.
URL Shortener usage
Scammers use bit.ly or tinyurl inside QR codes to hide the final destination. A legitimate business will almost always use their own branded domain.
High-Pressure urgency
Messages like 'Scan now to prevent account lockout' or 'Scan for your 90% discount' are used to panic you into scanning without checking.
Unusual geographic origins
The QR code leads to a domain registered in a high-risk country that has nothing to do with the local business you are visiting.
Related guides
Use the checker for the fast answer, then read the deeper guidance for recurring scam patterns.
URL Scam Checker
Link Safety Checker
FAQ
These are the questions people usually ask right before they click, reply, or pay.
Got a screenshot or attachment? Our AI can analyse it.
Check the sender before you trust the message.
Start with a fast scan, then move to SuperScan when the message involves money, account access, or sensitive documents.