QR Code URL Scanner

Don't trust QR codes blindly. Upload any QR code image to extract its URL and instantly check it for phishing, malware, and malicious redirects before visiting.

How to Use the QR Code URL Scanner

  1. Drag and drop a QR code image onto the IncogSay scanner, or click to browse files.

  2. The scanner extracts the embedded URL from the QR code automatically.

  3. A full multi-phase URL safety scan runs automatically on the extracted link.

  4. Review the threat score and detailed findings before deciding whether to visit.

QR Code URL Scanner — Frequently Asked Questions

What is QR code phishing (quishing)?
Quishing is a phishing technique where attackers embed malicious URLs in QR codes. When scanned, the victim is directed to a phishing site or malware download, bypassing traditional link scanners.
How does IncogSay scan QR codes?
IncogSay uses a client-side QR decoder (jsQR) to extract the URL from your uploaded image, then runs the full URL safety analysis locally — your image is never uploaded to any server.
What image formats are supported?
PNG, JPG/JPEG, WEBP, and GIF formats are supported. The QR code should be clear and well-lit for accurate decoding.
Can I scan QR codes from screenshots?
Yes. If you receive a suspicious QR code in an email or document, take a screenshot and upload it to IncogSay for analysis.
What should I do if a QR code is flagged?
Do not visit the URL. Report the QR code to the platform where you found it, and warn others. If you already visited, change any passwords entered and run a malware scan.