Phishing protection
A QR code on a "parking meter" or "restaurant menu" that nobody you know placed there? Always decode before scanning.
Drop in a QR code image and see the encoded URL, Wi-Fi credentials, or text - locally in your browser. Spot phishing before you scan with your phone.
PNG, JPG, or WebP - anything you can screenshot or photograph from a poster.
Most QR codes are URLs, but they can also contain plain text, Wi-Fi credentials, vCards, SMS, email, or geo coordinates.
We flag direct download URLs, IP-address hosts, internationalised homographs, and known shorteners - all common phishing patterns.
Once you have decided the destination is safe, open it directly or copy the URL.
For extra safety, paste the decoded URL into our Link Privacy Checker to see every redirect hop before you click.
Make it trackableA QR code on a "parking meter" or "restaurant menu" that nobody you know placed there? Always decode before scanning.
Examining QR codes in malware samples, fraud campaigns, or supply-chain investigations - without touching the destination.
Visually impaired users who cannot easily aim a phone camera can decode codes from photographs.
Your printed flyer's QR code is not scanning? Decode the file you exported to confirm the encoded URL is correct.
See what is inside a Wi-Fi QR, vCard, or geo:lat,lon code without committing to opening it.
Tourist destinations and parking apps are full of replaced QR stickers. Decode locally before you hand over a card.
Wrap your destination in a short link first - see every scan, country, and device behind the QR.