Cactus

Is this QR code safe?

Upload an image of a QR code. Cactus will decode it and run the same full link analysis — local checks, Google Web Risk, domain age — on the URL it contains.

Before you upload
  • Your image is decoded on the server and immediately discarded — it is never stored.
  • The URL extracted from the QR code is checked against Google Web Risk and rdap.org, the same as a manual link check.
  • Do not upload QR codes that contain sensitive personal information.

Accepted: JPG, PNG, GIF, BMP, WEBP

You can also paste a screenshot directly on this page (Ctrl+V / ⌘V).

or

Frequently asked questions

Can a QR code be a scam?

Yes - "quishing" hides a phishing link inside a QR code. Because you can't read it with your eyes, scammers put malicious codes on fake invoices, parking meters, and emails.

How do I check a QR code safely?

Preview the link before opening it, or decode it here first. Watch for look-alike domains, and never enter passwords or payment details from an unexpected code.

How our checks work