QR Code Safety Checker (Decode in Your Browser)
Quick answer: upload a QR photo or paste a URL. Decoding runs in your browser with a local library. We then apply the same style of phishing checks as our link checker.
🔒 The QR image is decoded only inside your browser with a local jsQR library. We do not upload the image or the URL.
Important: this reads the text hidden in the QR. It does not visit the site. A new scam domain can still look “clean”.
Try an example URL:
How QR safety checks work
Why
People trust stickers and posters. Attackers replace a real QR with one that opens a fake UPI or login page.
What
Your browser decodes the image locally, shows the destination text, and runs phishing heuristics (lookalike brands, shorteners, risky endings, IP hosts, @ tricks).
How
- Take a clear photo of the QR or upload a screenshot.
- Read the destination URL before you open it.
- If the domain is not the real brand, stop.
- Prefer typing the official site or opening the official app.
Example, step by step
- Input: a parking QR that decodes to
http://sbi-kyc-update.xyz/login. - Result: High risk — brand lookalike and odd domain.
- What it means: Kabir pays parking in the official city app instead of tapping the sticker.
Ravindra Bagale's Tip
A sticker on a parking meter or restaurant table can point to a fake UPI or login page. Decode first, read the real domain, and type the official app address yourself when unsure.
Ravindra Bagale's Tip – मराठी
Parking किंवा restaurant वरच्या sticker मधला QR बनावट UPI किंवा login कडे नेऊ शकतो. आधी decode करा, खरा domain वाचा, आणि शंका असेल तर official app स्वतः उघडा.
Ravindra Bagale's Tip – हिंदी
Parking या restaurant के sticker वाला QR नकली UPI या login पर ले जा सकता है. पहले decode करें, असली domain पढ़ें, और शक हो तो आधिकारिक app खुद खोलें.
Frequently asked questions
Is my QR image uploaded?
No. Decoding uses a local copy of jsQR in your browser. The image stays on your device.
What if the QR holds plain text, not a URL?
We show the text. If it is not a link, do not treat it as a website.
Can a QR steal data just by scanning?
Decoding here only reads the text. Danger starts if you open a malicious URL or enter secrets on the page it opens.