Frequently Asked Questions
Everything about how the check works, what a verdict means, and what happens to your data.
Is CheckThisQR free?
Yes, completely. There's no account, no signup, and no limit on how many codes you can check.
How does the check work?
The QR code image is decoded entirely in your browser. If it contains a web link, that link — and only that link — is sent to check against threat-intelligence data before you visit it. The image itself is never uploaded anywhere.
What does a "Clear to Scan" verdict actually mean?
It means the destination isn't currently flagged by Google Web Risk, the threat-intelligence data we check against. It's a strong signal, not an absolute guarantee — a brand-new scam page can briefly exist before any security engine has flagged it. Stay cautious with anything asking for a password or payment, even after a clear result.
What does "Hold — Verify" or "Do Not Scan" mean?
"Hold — Verify" means the destination shows some risk signals worth a closer look before proceeding. "Do Not Scan" means the destination is actively flagged as unsafe by Google Web Risk, and we recommend not visiting it.
Do you store the QR codes I check?
No. The image is decoded locally in your browser and never uploaded. See our privacy policy for full details on what is and isn't sent.
Does it work on mobile?
Yes — you can either upload an image or use your device's camera directly in the browser. No app install is required.
What if the QR code isn't a web link?
Some codes contain Wi-Fi credentials, contact cards, or plain text instead of a URL. In those cases there's no destination to safety-check, so we just show you the decoded content directly.
I already scanned something suspicious — what should I do?
See our step-by-step response guide for what to do depending on what you entered or downloaded.
Can a QR code contain a virus?
A QR code is just encoded text, so the code itself cannot infect your phone. The risk is where the link inside it leads: a page can try to trick you into entering details or downloading something harmful.
Is it safe to scan codes on my own device?
It is safer than scanning on an unknown device, but not risk-free. Keep your operating system and browser updated, and treat any page that asks for a password or payment with caution.
Can't I just use my phone's camera preview?
The preview shows the link text, which is helpful, but it will not reveal where a short link or a redirect chain finally lands. CheckThisQR resolves the redirect chain and shows the final destination.
What if the code comes from a company I trust?
Trust the company, not the code. Codes can be swapped or the link behind them changed. Verify the destination independently or check it before you open it.
How do I report a malicious QR code?
Report the destination link to Google Safe Browsing and tell the owner of the place or platform where you found the code. If money or identity was involved, also report it to the FTC at reportfraud.ftc.gov.