QR Code Safety Checker
Analyze URLs from QR codes for phishing, shorteners, and suspicious patterns.
All checks run in your browser — no URL is sent to external services.
Simple Text Check (No Connection): This tool only analyzes the text pattern of the URL. It does NOT visit or fetch the actual website.
About
A free tool that analyzes URLs from QR codes for phishing indicators, URL shorteners, suspicious TLDs, raw IP addresses, and Punycode (homograph) domains — entirely within your browser.
Quishing (QR code phishing) is a growing attack where fraudulent QR codes redirect victims to phishing sites. Always verify a URL before tapping. This tool provides a fast, privacy-respecting pre-check with no external API calls.
How to Use
Copy the URL
Copy the URL from your QR scanner without tapping it yet.
Paste and Check
Paste the URL here and click "Check".
Review Results
See a Safe / Caution / Danger verdict with detailed check results.
Glossary
- Quishing
- QR code phishing — a technique where attackers replace or fake QR codes to redirect victims to phishing pages.
- URL Shortener
- Services like bit.ly that shorten URLs, hiding the actual destination. Commonly exploited in phishing campaigns.
- Phishing Site
- A fake website mimicking a legitimate one to steal login credentials, credit card numbers, or personal data.
- IDN (Internationalized Domain Name)
- Domains containing non-ASCII characters. Homograph attacks use look-alike characters (e.g. Cyrillic а vs Latin a) to deceive users.
- HTTPS vs HTTP
- HTTPS encrypts traffic. URLs using plain HTTP lack transport security and warrant extra scrutiny.
- Redirect
- Automatically forwarding a user from one URL to another. URL shorteners often use multiple redirect hops.
FAQ
- Q.L'URL est-elle envoyée à un navigateur ?
- Non. Toutes les analyses sont effectuées avec une correspondance de modèles JavaScript locaux : aucune API externe n'est appelée.
- Q.« sûr » signifie-t-il que l'URL est définitivement sûre ?
- Non. Il s’agit d’un outil d’analyse de modèles statiques comportant des limites. Faites toujours preuve de jugement avant de visiter une URL inconnue.
- Q.Puis-je scanner directement les images de codes QR ?
- Cet outil analyse uniquement le texte de l'URL. Utilisez une application de scanner QR distincte pour extraire d'abord l'URL.
- Q.Peut-il révéler la destination d’une URL raccourcie ?
- Il détecte les modèles de raccourcissement mais ne peut pas résoudre la redirection finale sans appels d'API externes.
Cas d'utilisation
🏪 Retail & Restaurants
Verify QR codes at payment terminals before scanning to pay.
📦 Delivery Alerts
Check URLs in suspicious delivery notification messages.
🎟️ Tickets & Events
Validate QR codes shared on social media for events.
🔒 Security Awareness
Use in corporate or classroom security training programs.