QR code: check the address before opening

QR is a way to save information in the image. It does not certify the sender or the owner of the site. The sticker on the parking lot, the image in the email and the code in the restaurant can lead to different types of operations.

Stop on the preview.

If the camera shows the address before opening, read it. Check the full host and not just the visible brand name. If the preview is too short, do not treat it as confirmation.

Note the additional sticker covering the original on the physical marking. However, no sticker gives no guarantee. When you pay, compare the instructions with the official application or operator information.

Check your consent

QR can open a page, start logging in or transfer the data to the payment application. Read the recipient, amount and description of the operation before approving. Do not scan the login code sent by a stranger under the pretext of receiving the award.

When someone uploads the “ account repair” code, open the service yourself. Do not install an additional application or configuration profile just because they requested a page after scanning.

Take care of the context

A code printed by a trusted person can still lead to a page whose address was later changed. Similarly, the real message can be supplemented by someone with access to the sender's account.

If in doubt, please ask the service to confirm or use another official payment method. You can read the copied address in URL Inspector, remembering it's not a security scanner.

If data has already been provided

When entering the password, code or payment data, select the appropriate option post-phishing response plan. For an unknown payment contact the bank by a known number. Showing the QR preview does not mean taking over the account; it is important to continue to operate and the rights granted.