Back to Home
100% Private • No Server Upload • Used by Security Researchers

Is This QR Code Safe?

Fake QR codes are everywhere. Before you scan that parking meter, menu, or flyer – check if it leads to a phishing site, malware, or scam.

Built with local-only analysis • 14 documented risk heuristics • Zero tracking

Check QR Code Safety

Drag & drop a QR code image here, or click to upload.
(Zero-Trust: Your image never leaves this device)

What Makes a QR Code Dangerous?

Phishing URLs

Fake login pages for banks, PayPal, Amazon – designed to steal your credentials.

Typosquatting Domains

Look-alike domains like "paypa1.com" or "amaz0n.com" that trick you visually.

Malware Downloads

Links to .exe, .apk files that install viruses, spyware, or crypto drainers.

Real QR Code Scam Examples

Parking Meter Scam

Scammers place fake QR stickers over real payment codes on parking meters. Victims pay on a fake site that steals credit card info. Reported in Austin, London, and Sydney.

Restaurant Menu Hijack

Attackers swap table QR codes with links to "WiFi login" portals that harvest email credentials or install malware.

Crypto Wallet Drainer

QR codes at crypto events link to fake "airdrop" sites that are actually wallet drainers, stealing tokens instantly.

How to Check a QR Code for Scams

1

Take a Photo or Screenshot

Capture the QR code before scanning it with your phone's camera.

2

Upload to RexoGate

Drop the image into the scanner above. It decodes the QR entirely in your browser.

3

Review the Trust Score

We analyze the URL against 14 risk heuristics. Score > 60 = likely safe. Below = blocked.

How to Stay Safe from QR Phishing

Always check the URL before entering payment info
Look for stickers placed over original QR codes
Be suspicious of QR codes asking for login credentials
Use RexoGate to verify before scanning

Frequently Asked Questions

Can QR codes contain malware?

QR codes themselves don't contain malware. However, they can link to websites that download malicious files (.exe, .apk) or steal your credentials via fake login pages.

What is QR phishing (Quishing)?

Quishing is a phishing attack using QR codes instead of links in emails. It bypasses spam filters because the malicious URL is hidden in the image. It's the #1 growing attack vector in 2026.

Do QR codes track you?

Some QR codes contain tracking parameters (UTM, unique IDs). RexoGate scans happen 100% locally in your browser – we never see what you check.

Is RexoGate really free?

Yes. The QR code checker is completely free with no limits. Pro features are available for advanced use cases like bulk scanning and PDF reports.

More Security Tools

Stay Protected from QR Scams

Bookmark this page and check every suspicious QR code before scanning.

Get Pro for Bulk Scans