Free tool
Read a QR code without opening it
Your phone opens a QR code as soon as it sees it. Here, we only read it: you see where it leads and who is behind it, then you decide.
On a phone: “Use the camera” opens the rear camera. On a computer: drop a screenshot or photo of the code, or paste it (Ctrl+V, ⌘+V).
🔒 The camera image and your photos are read by your browser and never leave your device. The content of the code is not sent anywhere.
Quishing: phishing by QR code
A QR code is just a link you cannot read. That is exactly what makes it useful to fraudsters.
Fake stickers are pasted over real codes on parking meters, EV chargers, restaurant tables and posters. Emails ask you to “scan to confirm your account” so the link escapes email filters and ends up on your phone, where the address bar is tiny. The name has stuck: quishing.
What we show you
Domain
Who is really behind it
The domain that counts is in bold. We check it for lookalike characters and for resemblance to known brands.
A city's parking payment should be on the city's or its official operator's domain.
bit.ly · qrco.de
Shorteners
The real destination is hidden behind a short address. Common with QR code generators, and just as common with fraud.
Some offer a preview without opening.
utm_source
Tracking
Parameters that measure which poster or campaign you came from. Harmless; we give you the address without them.
Copy it rather than open it if you prefer.
WIFI · otpauth · bitcoin
Not just links
A code can connect you to a Wi-Fi network, add a contact, prepare a text message, add a two-factor key or request a crypto payment.
We say what it would do, and what to watch for.
Good habits
- Look at the code before scanningA sticker with raised edges over another code, on a meter or a kiosk: do not scan it, tell the operator.
- Prefer the official app or siteTo pay for parking, a bill or a fine, type the address yourself or use the app you already have.
- Never enter a code received by text message…on a page reached by QR code, and never scan a code someone sends you to “verify” your account.
The camera only works on a secure page (https) and after your permission. If your browser cannot decode QR codes on its own, a small library (jsQR) is loaded from our site to do it; nothing is sent elsewhere.
