A pattern that carries information
A QR code is a square pattern a compatible camera or scanner can read. It encodes information in a form the reader can turn back into text or an action. Many everyday codes contain a website address.
DENSO WAVE, the QR code's developer, describes how the format stores data and supports reading from different directions. You do not need to understand the individual squares to use one.
Picture a restaurant menu code. Scanning it may reveal a link to the menu. The code helps you reach that address without typing it; it does not tell you whether the restaurant still uses that page.
Reading a code and opening a link are separate
A phone's scanner may show a preview before you open the website. Read that preview when available. The scanner interprets the code; the browser then handles the page you choose to visit.
Not every QR code is a website link. A reader may recognize other kinds of information and offer a different action. What appears depends on the code's content and the app reading it.
When a page asks for permission, a download, a login or a payment, evaluate that request separately. A successful scan shows that the pattern was readable. It does not verify the person who printed it.
Check the destination in context
Ask whether the action fits what you expected. A cafe menu should not need your banking password. A parking payment should make sense for the location and parking operator you are using.
Inspect the website address for unfamiliar domains, misspellings or extra words that imitate a familiar brand. A short link or redirect may make the final destination less obvious. If you cannot verify a payment destination, use the operator's established app or website instead.
A secure connection protects traffic to a website, but it does not prove the business behind the site is legitimate. Treat a payment request as a separate decision from opening the page.
Be cautious with unexpected codes
The FTC's QR code guidance describes scammers covering genuine parking codes with their own and sending unexpected codes in messages. A neat printed sign can still point somewhere you did not intend.
Pause if a code arrives with an urgent account warning or an unexpected delivery message. Contact the organization through details you already trust rather than using the code as your only route.
For a code on a sign, look for a replacement sticker or anything that conflicts with the operator's other information. These checks do not guarantee safety; they help you notice reasons to verify.
Use a short scan-and-check routine
- Consider who supplied the code and why you need it.
- Read the preview or destination address.
- Confirm that the page and requested action fit the situation.
- Use a known website or contact if something looks wrong.
Keep your phone's software updated and protect accounts with strong passwords and multifactor authentication. If you entered a password on a suspicious page, go directly to the real service to change it. If a payment was affected, contact the payment provider promptly.
QR codes are convenient shortcuts. Taking a moment at the destination keeps that convenience connected to a deliberate choice.
Know how to handle the next suspicious alert.
Our browser notification guide explains where fake virus messages can come from and how to block their sender.