Before you respond
QR code messages
Learn how QR code scams hide harmful links, what signs to slow down for, and how to verify before scanning or paying.
Reviewed May 14, 2026
Quick answer
A QR code may be risky if it appears in an unexpected message, invoice, parking notice, package note, or account warning.
Before scanning, check where the code came from and whether you can use an official app or website instead.
What it may look like
"Scan this QR code to verify your account and pay the overdue balance before service is suspended."
Signs to slow down
- The code appears in an unexpected message, flyer, invoice, parking notice, or package note.
- It sends you to a page asking for login, payment, identity, or card information.
- A sticker or printed code may have been placed over a real code.
- The message creates urgency around a bill, account, delivery, parking, or toll.
What to do next
- Do not scan a code from an unexpected message if you can verify another way.
- Use the official app or type the official website yourself.
- Check the web address before entering any information.
- Do not enter passwords, codes, card numbers, or identity details from a QR link.
- Ask a trusted contact if the code or message feels unusual.
How Olevo can help
Olevo can give you a calm second opinion before you respond.
Trusted sources
Scammers hide harmful links in QR codes to steal your information
Federal Trade Commission
FTC guidance warns that QR codes can hide harmful links that ask for account, payment, or identity information.
Spoofing and Phishing
Federal Bureau of Investigation
FBI guidance explains that spoofing can disguise phone numbers, sender names, emails, and websites.
Top text scams of 2024
Federal Trade Commission
FTC data shows $470 million in reported 2024 losses from scams that started with text messages.
Related examples
Common questions
Can a QR code hide a bad link?
Yes. You usually cannot see the destination until after scanning, so treat unexpected QR codes like unexpected links.
Are QR codes always unsafe?
No. They can be useful, but it is safer to use official apps or websites for payments and account action.
What should I check after scanning?
Look carefully at the web address before entering any login, payment, or identity information.