Red Flags
5 Signs of a Malicious QR Code
No single sign proves a code is malicious, but a code missing all context is worth a second look before you scan.
3 signs to watch for
- A sticker placed over what looks like another QR code
- No visible business name, logo, or branding nearby
- Urgency language nearby, like "Scan now or lose your spot"
2 more red flags
- The code is on a flyer or standalone sign, not printed material from a business
- The linked page immediately asks for payment or login details
Use your judgment
Any one of these alone isn't proof of a scam, but a code missing all context is worth a second look before you scan.
Already scanned a bad code?
See our guide on what to do if you scanned a malicious QR code for quick steps to limit the damage.