Check first, then open.
Is this QR code safe?
QRTrust checks every QR code against Europe's largest quishing database before you open it. Report suspicious codes directly – we take care of the follow-up.
How it works
How the QR code check works
- 1
Capture the QR code
Scan the code with your camera, upload a photo or paste the link. The link is not opened.
- 2
Wait for the result
QRTrust compares the destination with its own quishing database and other phishing lists and follows redirects to the final page. The result appears within a few seconds.
- 3
Decide or report
Only open the link if the result is green. Report a suspicious code directly, optionally with a photo and location. We take care of everything else.
Traffic light
What does the result mean?
GreenThe link has not been flagged so far.
YellowPlease check the link yourself as well.
RedThe link has been flagged as phishing or quishing.
Our tip: Bookmark qrtrust.de or add it to your phone's home screen. That way the check is at hand when you are standing at a parking meter or charging station.
Follow-up
After your report, we take care of the rest
At QRTrust, a report does not end up in an inbox. We follow up on every confirmed case so that the fake code disappears and others are warned.
- 1
Secure evidence
We capture the scam page with a screenshot, timestamp and technical data before it goes offline.
- 2
Inform the company
We inform the company whose name is being misused, such as the bank, the parking operator or the charging provider.
- 3
Work with the authorities
We work with the relevant authorities and provide the secured evidence for prosecution.
- 4
Warn others
Confirmed cases are added to the quishing database and the quishing map. Every further scan of the code is then flagged as dangerous.
Current Quishing Warnings
View all articlesDoctor in Thuringia Loses About 100,000 Euros After Fake Apobank Letter with QR Code
A fake letter led to a phishing site via a QR code. A supposed bank employee then persuaded the doctor by phone to approve 39 transfers.
Fake QR Codes Reported in The Hague, Ieper and Noord-Limburg as Quishing Spreads Across the Benelux
Journalist Alberto Stegeman warned about QR code fraud on Dutch television. Four further incidents have been reported in the Netherlands and Belgium.
Police Warn of Fake Parking Tickets with QR Codes in Villingen-Schwenningen
The notices carry a city logo, the correct number plate and a QR code for instant payment, police said. They are left on parked cars.
Background
What is quishing?
Quishing is phishing via QR code. Fraudsters stick fake codes on parking meters and charging stations, print them on fake bank letters or parking tickets and send them by email. The code leads to a cloned page that asks for login or card details.
Unlike a link in an email, a QR code does not reveal where it leads. That is exactly what the perpetrators exploit.
How to recognise a fake QR code
- Sticker over the original
- A code stuck over the original has a noticeable edge or sits at an angle. Many cities do not use QR codes on parking meters at all.
- Unusual address
- Shortened links, misspelled brand names or unusual endings such as .live or .top are warning signs.
- Immediate login or payment
- The page immediately asks for bank access, a TAN or card details, although you only wanted to park or charge.
- Time pressure
- Supposed account blocks, reminders or deadlines: pressure is meant to stop you from checking calmly.
FAQ
Frequently asked questions
I have already entered my details. What now?
How do I report a suspicious QR code?
Is the link opened during the check?
What happens to the links that are checked?
Does the check cost anything?
Made in Germany
Data Protection Made in Germany
Your data stays in Germany - guaranteed GDPR compliant.
- Hosted in Germany
- GDPR Compliant
- Real-time Analysis
- TLS 1.3
- Multi-Layer
- EU Only