confirmURL.com

Free tool

QR code link checker

QR codes on parking meters, posters, parcels and restaurant tables can hide phishing links you cannot read. Use our QR scanner to decode the code on your own device, or paste the link it contains below for a full safety check.

Public http/https only. Private networks blocked. Never enter passwords in the sandbox. How it works

Scan the code safely

Open the QR code scanner and point your camera at the code, or upload or paste a photo of it. The code is decoded in your browser – the image is never uploaded to us. If the code contains a web link, we show it to you first and you choose whether to run the safety check. Codes that contain Wi-Fi details, phone numbers, text messages or contact cards are shown as what they are, with a short tip, instead of being opened.

Open the QR scanner

Why “quishing” works

QR phishing, sometimes called quishing, works because a QR code is unreadable to people. Scammers stick fake codes over real ones on parking machines and EV chargers, print them in letters that look like they come from a bank or delivery company, and put them in emails to slip past link filters. Your phone camera usually shows only a short preview of the address, so it is easy to open a lookalike domain without noticing.

Look out for codes stuck on top of other codes, codes that ask you to log in or pay straight away, and payment pages that are not on the company's official domain. When a code is for a payment, it is safer to open the company's official app and pay there.

What the safety check does with the link

Once you have the link, the check is the same as for any URL. We open it in an isolated headless browser, follow every redirect, and check it against Google Safe Browsing and VirusTotal (70+ security vendors). We also look at domain age, the HTTPS certificate, lookalike brand domains and fake login forms, and give you a screenshot of the final page. The verdict is a strong hint, not a guarantee: new scam pages can appear before blocklists catch up.

Frequently asked questions

Is my QR code photo uploaded?

No. The QR scanner decodes the image or camera frames in your browser. Only the decoded link is sent if you choose to run a safety check.

Can I check a QR code without a camera?

Yes. Upload or paste a screenshot or photo of the code on the scanner page, or paste the link it contains into the form on this page.

What if the QR code is not a link?

Wi-Fi details, phone numbers, SMS, contacts and calendar codes are shown as text with a safety tip instead of being opened.

Is it safe to pay through a QR code?

Only if you are sure it goes to the official payment page. On parking machines and posters, check for stickers placed over the original code, and prefer the official app.

English · Español · Português · Français · Tiếng Việt · 简体中文 · Tagalog