By clicking a retailer link you consent to third-party cookies that track your onward journey. If you make a purchase, Which? will receive an affiliate commission, which supports our mission to be the UK's consumer champion.
What are QR codes and are they safe to use?
QR (or Quick Response) codes are now commonly used for a range of purposes, from viewing menus at restaurants and cafes, to product packaging and returns.
The technology isn't exactly new (these barcodes have been around since 1994), but what are they used for, and are they safe? We explain more about the technology, how QR codes are now being misused by scammers, and how to stay safe.
Check our guide to the best smartphones for tips on how to shop savvy for a mobile phone.
What are QR codes?
Quick Response Codes (more commonly known as QR codes) are two-dimensional barcodes that can point you to an online destination such as a website or download link. They're essentially hyperlinks in image form.
To interact with a QR code, you point your phone camera at the shape so your device can act as a scanner. A message with a clickable link will pop up on your mobile, allowing you quick access to a website with more information.
Anybody can create and share a QR code using a mobile app or website. For example, scan the QR code below and your smartphone or tablet will point you towards the Which? website.
QR codes can be used for a wide range of purposes. During the coronavirus pandemic they helped with social distancing restrictions, as QR codes appeared outside venues so you could 'check in'. Many restaurants have kept QR codes since to allow diners to view menus.
Elsewhere, online retailers use them to facilitate returns, you may see them on parking machines in car parks, companies use them for quick access to marketing or promotional materials, or to facilitate feedback, and they can also be used to share content between individuals.
Are QR codes safe to use?
Not all QR codes are safe. Considering anybody can create a QR code and have it point to any online destination they want to, there's room for scammers to take advantage of the technology. This is known as 'quishing' - a combination of QR and phishing.
Various reports have warned consumers about fake QR codes on payment machines in car parks – false codes that lead people to enter their details on fraudulent websites. QR codes have also been used to set up recurring payments or 'subscription traps', and can even be sent via email to imitate companies like Apple.
QR codes can also be configured to download a file to your smartphone without you giving the thumbs up - data-grabbing apps running in the background may be able to collect and sell your personal data.
As such, it's important to be extremely vigilant when using QR codes – check to see if they've been tampered with and try to validate that they are genuine, avoid codes in emails and preview any web address before you load a page.
More about QR code scams:
- QR codes hijacked for subscription traps and scams
- Watch out for this Apple impersonation scam
- Parking app scams: drivers tricked into signing up for expensive subscriptions
- Scam victim loses more than £6,000 after buying an £8 camera on eBay
How do I scan QR codes?
Most modern Android and Apple smartphones will have a QR scanner built into the operating system – iPhones have one in the default camera app. These are your best options if available.
If not, you can download a QR scanner from the App Store for your device, but be careful which you use to avoid installing something malicious. Pick an app from a brand or developer you recognise, and make sure it's backed by positive user reviews.
Find out if you could benefit from extra protection on your mobile phone with our guide to the best free and paid antivirus for smartphones.
Best free apps to scan QR codes
There are loads of QR code scanning apps on the app stores of Android and Apple devices. Most are free, but many contain ads. Sometimes this can make it difficult to choose the correct link from results after you scan a code, so be extra vigilant if you're using a free scanner app that funds itself using in-app advertising. If your phone doesn't have one built in, either of the two options below should be a good alternative.
Google Lens
Available on Apple and Android
You may already have Google Lens installed on your Android phone – if not, it's a simple and free download from the Google Play or Apple App store.
As well as scanning QR codes, you can scan and translate text on the go, search for similar images online, identify plants and animals and quite a bit more, making it a handy all-in-one app to keep on your phone.
Trend Micro QR Scanner
Antivirus maker Trend Micro has its own QR scanner app on Android. You point your camera at a code and line it up with the markers on-screen.
Unlike some other QR scanner apps, Trend Micro QR Scanner will display a preview of the URL generated by the code - you need to click 'Open' before you can be redirected. If the app spots a URL that could potentially point you to a malware-ridden website, you'll get a warning.
A history of the QR codes you've scanned is stored on the app, so you can revisit old links in just a couple of taps.
News, deals and stuff the manuals don't tell you. Sign up for our Tech newsletter, it's free monthly.
