Check a QR code destination before opening it

A QR code can hide the destination until you scan it. The printed design or familiar logo around it is not proof of ownership.

1. Consider the context first. Be cautious with an unexpected message that urges immediate action, or a sticker placed over another code on a public sign.
2. If your scanner displays a link preview, read the destination before opening it. Watch for misspellings, extra words and a domain different from the expected organization.
3. When uncertain, open the organization's known app or type its known address yourself. Use that independent route to check the request instead of following the code.
4. If a page unexpectedly asks for a password or a software installation, stop and verify through a trusted contact method.

Keep your phone updated. A plausible-looking address alone cannot establish that a request is legitimate, so combine the address check with the context.