Why this matters
According to the FBI's Internet Crime Complaint Center (IC3), more than 201,000 Americans aged 60 and older reported losses exceeding $7.7 billion to fraud in 2025, with an average loss per victim exceeding $38,000. Scammers specifically target older adults because they know that not everyone grew up around QR codes, smartphones, and constant digital scrutiny — and that's a completely reasonable thing to be less familiar with. This page exists so a QR code doesn't become one more thing to worry about.
Three simple rules — that's really it
- If you weren't expecting it, don't scan it. A real business, bank, or government agency will never require you to scan a surprise QR code to avoid a penalty or claim a prize. If something arrived unexpectedly with a QR code attached, that alone is reason enough to ignore it.
- Never enter a password or payment information right after scanning, without pausing first. Taking thirty extra seconds to think never hurt anyone, and a legitimate page will still be there in thirty seconds.
- It is always okay to ask someone before scanning. A family member, a store employee, or a librarian — asking "does this look right to you?" costs nothing and catches most problems immediately.
If you're ever unsure
You can use CheckThisQR to check a code without needing to understand anything technical about it. Point your camera at the code, or upload a photo of it — the site will tell you in plain words whether it looks safe, and you decide what to do next. There is no account to create and nothing to install.
You are never being foolish for asking a question about a QR code, a link, or a phone call. Scammers rely specifically on people feeling embarrassed to ask — asking is always the right move, every time, no exceptions.
For family members
If you're helping an older family member navigate this, the most useful thing you can do is make it genuinely easy and judgment-free for them to reach you with a quick "is this okay?" question — before anything is scanned or clicked, not after. Bookmarking CheckThisQR on their phone's home screen gives them a low-stakes first step they can take on their own, without needing to track you down first.
Scams that arrive by mail
Scammers often aim QR codes at people who trust printed instructions. A common pattern is a letter or postcard with a QR code and a message about an overdue bill, a missed appointment, or a benefit that must be claimed. The code leads to a page asking for payment or personal information, and the letter can look official by borrowing real agency names and formatting.
- Any code that comes with a request for payment you did not start.
- Messages claiming urgency about benefits, bills, or legal matters.
- Codes from sources you cannot independently verify.
- Any page asking for a Social Security number or full card number.
The one rule for unsolicited mail
Do not scan a code from unsolicited mail. Instead, call the organization using a number from its official website or your own records. If you already scanned and entered information, contact your bank and report it to the FTC at reportfraud.ftc.gov.
Check any QR code, anytime
Free, private, and simple — point your camera or upload a photo.
Check a QR code →