Upload
Choose a QR image or take a photo with your camera.
Scan QR codes
before you trust.
Decode a QR code, inspect its destination, and preview the link before you decide to open it.
Works on Android, iPhone, and desktop — no app required.✓ Local analysis✓ No uploads✓ No data stored
scan QR Scanner+
Drop a QR code image hereor click to uploadSupports JPG, PNG, WebP — Max 10 MB
DECODED DESTINATION
i
Smart checks, not a guarantee. scan QR checks common warning signs locally. Always verify unexpected destinations.
DESTINATION PREVIEWOpen destination →
QUERY PARAMETERS
This preview is generated locally. The website has not been opened.QR CONTENT
Three steps. Zero guesswork.
Inspect
We decode and check the destination in your browser.
Decide
Review the verdict and preview before opening anything.
How to scan a QR code on your phone
On a phone, tap Use Camera and allow camera access, then hold the QR code inside the frame. If the code is already saved as a screenshot or photo — for example from a message or another app — tap Upload Image instead and choose it from your gallery. Both methods decode the code in your browser; nothing is uploaded to a server.
Need device-specific steps? See the Android guide or the iPhone guide.
What is TheScanQR?
TheScanQR is a free browser-based QR code scanner designed to help you safely inspect QR codes before opening their destinations. Unlike traditional QR scanners that open links immediately, our tool shows you exactly what a QR code contains and where it leads, giving you time to review and decide whether to proceed.
The scanner works entirely in your browser using JavaScript — your QR images are processed locally and never uploaded to our servers. This approach protects your privacy while giving you the information you need to make informed decisions about suspicious or unexpected QR codes.
What can a QR code contain?
QR codes can store various types of information:
- Website URLs — Links to web pages, online forms, or downloads
- Contact information — vCard data with names, phone numbers, and email addresses
- Wi-Fi credentials — Network name and password for automatic connection
- Plain text — Messages, instructions, or other textual content
- Email addresses — Mailto links that open your email app
- Phone numbers — Tel links that initiate phone calls
- SMS messages — Pre-filled text messages with recipient and content
What does TheScanQR check?
When a QR code contains a web address, our scanner performs several automated safety checks:
- Protocol inspection — Warns if a link doesn't use secure HTTPS
- Domain analysis — Flags raw IP addresses and suspicious patterns
- URL structure review — Identifies potentially problematic redirects and shorteners
- Credential detection — Checks for embedded usernames or passwords that could indicate malicious intent
- International domain inspection — Flags encoded international characters that could be used for domain spoofing
Important: These checks can identify common warning signs, but they cannot guarantee that a destination is safe. Sophisticated attacks often use legitimate-looking websites that would pass these basic checks. Always verify unexpected QR codes independently, especially those requesting payments or personal information.