Are QR codes in public places dangerous?
At the bus stop I saw a QR code sticked on top of something, supposedly from some service or whatever. My friend says it's phishing and you can get a virus from it. Is that true or is he just being paranoid?
3 answers
★ Best answer
your friend isn't completely paranoid, but he's not totally right either. phishing through qr codes is a real thing, but not in the sense of "you scan it and boom, virus instantly." here's what can actually happen: you scan the code, it redirects you to a fake website that looks like the real service (a bank, payment system, whatever), and there you enter your data. no virus needed, just basic deception. or the code could contain a malicious link, but it needs extra conditions to actually work. in 2026 smartphones are protected well enough that you can't just "catch something" from scanning.
what should you actually do? first, check where the qr code actually leads (usually a scanner shows the address before opening it). if the address looks sketchy - don't go there. if the qr code is stuck on top of an official logo or messes up the way a bus stop looks - it's probably actually fake. i always check stuff like this myself before going anywhere. if you need info about some service, it's better to find the official website through search instead of scanning some random code on the street.
The main rule is simple - don't scan codes that are clearly stuck on top of the originals or look suspicious. If a code at a bus stop is covered up with a homemade sticker, that's a huge red flag. You also shouldn't click on links from unknown sources, even if they seem to lead to a legitimate service.
Your friend is right that these codes are actually used for fraud, but you won't catch a virus just from scanning one. Here's what can actually happen: you'll go to a fake website that looks like a bank or payment system and enter your details there. Or a login form will open that captures your username and password. That's where the danger is. Or it could just be some scam like "sign up for our newsletter, enter our giveaway" - and then you'll get spam messages or scammers will call you.
The main thing people often miss: even if you're careful and don't enter any information, the act of clicking the link itself can leak information about you - your phone number if it's connected to your device, your location, your browser, your operating system. Scammers collect this data for future attacks on other people or to sell it. That's why it's better not to touch unknown codes on the street at all, even out of curiosity.
The danger is real, but not in the form of an instant virus! When you scan an unfamiliar code, it just opens a link in your browser. After that, anything can happen - a phishing page that looks like an official service and asks for your login and password, or a redirect to a site with malware. But it's not automatic infection, it's social engineering - you have to enter the data yourself or click on something suspicious!
The main rule: don't open codes if you don't know who they're from! Especially stickers placed over official announcements at bus stops - that's a classic scammer move. They stick their code right on top of a real bank or delivery service announcement so you think it's official. That's when you really need to be careful.
A lifehack that saves you: before scanning an unfamiliar code, check the link preview! On most modern phones, when you point your camera at a code or after you've scanned it, the address it leads to is shown. If you see something like "bit.ly/xyz123" or a weird domain - don't go there. You can also copy the link and search for it before clicking through to see reviews. And yeah, if there's a code at a bus stop supposedly from Kazpost or Alfa-Bank - check that organization's official website, they should have information about such codes!
Your answer
Log into answer.