Is this QR code safe?
Fake QR stickers are pasted over real ones on parking meters, restaurant tables and posters to steal card details. Check a code before you open it: see where it really goes, and whether Google lists the page as dangerous.
The result appears here. We never open the link for you.
What is quishing?
Quishing is phishing with a QR code. Because you can't read a QR code by looking at it, a scammer can print a sticker that looks official, stick it over the real code, and send you to a fake payment or login page. Common places include parking meters and car park signs, electric car chargers, restaurant tables, posters, parcels, and letters or emails that ask you to "scan to confirm".
Warning signs
- A sticker on top of another sticker, or one that's peeling, crooked or a slightly different size.
- It asks you to pay or log in when you expected a menu or information. Parking scams often ask for card details for a "fine" or "parking session".
- The address doesn't match the business, uses odd spelling, or is a short link that hides where it goes.
- Pressure to act fast: "pay within 24 hours", "your account will be closed".
If something feels off, don't scan. Type the business's address yourself, use their official app, or pay at the counter.
Own a business? Check your stickers
Walk round your tables, windows and car park every week or so and look for codes you didn't put there. Scan each one and check it opens your page. Qrunto codes carry your logo or initials in the middle, so a fake is easier to spot, and every link is checked for safety. Customers can report a suspicious Qrunto code, and unsafe links are stopped before they open.
Questions
Does this tool open the link?
No. Your photo is read on your own device to find the link. We send only the link to our server, which asks Google Web Risk whether it's on their list of dangerous sites. We don't visit the page and we don't log what you check. The answer for a link is cached for up to an hour, without anything about you, so repeat checks are quick.
Does "No warnings found" mean the link is safe?
Not for certain. It means Google doesn't currently list the page as dangerous and we didn't spot common warning signs. New scam pages appear every day, so always check the address is the one you expect before typing card details or passwords.
What if I already entered my card details?
Call your bank straight away using the number on your card, and tell them which page you used. In the UK you can also report it to Action Fraud; in the US, to the FTC at ReportFraud.ftc.gov.
Can I check a code on my screen?
Yes. Take a screenshot of the code and choose it as your photo.
QR codes your customers can trust.
Qrunto puts your logo in every code, checks every link for safety, and lets customers report fake stickers. Menus, Wi-Fi, reviews and WhatsApp, printed free. Coming soon to iPhone and Android.