Unexpected message or package
A text, email, letter, or parcel says you must scan to fix delivery, confirm an account, claim a prize, or see who sent something.
Free first check
Spot pressure, money, identity, and access signals in a redacted example.
Paid early access · USD 19 reference
Turn one redacted situation into a one-page decision brief, official routes, and 15-minute / 24-hour actions.
Clear boundary
No guaranteed verdict or recovery promise. Scope and timing come before payment.
A QR code is a shortcut to a destination, not proof that the destination is safe. Scammers use codes in texts, emails, packages, parking signs, invoices, fake notices, and payment requests to create a fast path to a lookalike site or payment.
When the code is unexpected or the message creates urgency, pause and verify through a known official route.
A text, email, letter, or parcel says you must scan to fix delivery, confirm an account, claim a prize, or see who sent something.
The code promises to avoid a fine, court action, account closure, utility shutoff, late fee, or lost refund if you act now.
The previewed URL has misspellings, extra words, strange domains, shortened links, or a destination unrelated to the organization named in the message.
The page asks for a password, one-time code, card details, an app download, remote access, or cryptocurrency payment after the scan.
Do not use a QR code from a surprising text, email, package, sticker, invoice, or caller. Do not reply to ask whether it is real.
Type the known website, use the official app, or find a trusted phone number on a bill or card. Check the notice there instead of using the QR code.
If you choose to scan a code you expected, read the destination before opening it. Stop if the domain, request, payment recipient, or login context does not match.
Close the page and do not download, sign in, or pay. If you entered information, change the affected password from the real site and contact the bank or provider through a known route.
Open the official source yourself. Do not use a link or phone number supplied by a suspicious QR message.
How fake QR destinations can steal logins, payment details, or personal information.
Why official-looking notices and urgent QR payment requests deserve independent verification.
Report a scam and contact the bank, platform, or provider through a known route if information or money was exposed.
Do not assume it is. Inspect the physical label and destination, and use the parking operator’s official app or website when in doubt.
Check the delivery through the carrier’s official app or website. Unexpected rescheduling fees and identity requests are warning signs.
No. Treat an unexpected package and its QR code as unverified. Do not enter credentials or payment details to identify a sender.
The risk depends on what the destination asks you to do, but scanning can open a harmful page. Close it, avoid downloads and sign-ins, and act quickly if you shared information.
Send this guide instead of forwarding the QR image, private notice, payment request, or account details.
A QR code can save a tap, but it cannot prove who is asking or where the payment goes.
Open the global safety checker →