Frequently Asked Questions
Everything about how the check works, what a verdict means, and what happens to your data.
Is CheckThisQR free?
Yes, completely. There's no account, no signup, and no limit on how many codes you can check.
How does the check work?
The QR code image is decoded entirely in your browser. If it contains a web link, that link — and only that link — is sent to check against threat-intelligence data before you visit it. The image itself is never uploaded anywhere.
What does a "Clear to Scan" verdict actually mean?
It means the destination isn't currently flagged by the threat-intelligence sources we check against. It's a strong signal, not an absolute guarantee — a brand-new scam page can briefly exist before any security engine has flagged it. Stay cautious with anything asking for a password or payment, even after a clear result.
What does "Hold — Verify" or "Do Not Scan" mean?
"Hold — Verify" means the destination shows some risk signals worth a closer look before proceeding. "Do Not Scan" means the destination is actively flagged as unsafe by threat-intelligence sources, and we recommend not visiting it.
Do you store the QR codes I check?
No. The image is decoded locally in your browser and never uploaded. See our privacy policy for full details on what is and isn't sent.
Does it work on mobile?
Yes — you can either upload an image or use your device's camera directly in the browser. No app install is required.
What if the QR code isn't a web link?
Some codes contain Wi-Fi credentials, contact cards, or plain text instead of a URL. In those cases there's no destination to safety-check, so we just show you the decoded content directly.
I already scanned something suspicious — what should I do?
See our step-by-step response guide for what to do depending on what you entered or downloaded.