Safety Preview Engine
Every URL gets a Safety Review Card before you open it. The apex domain is boldly highlighted — subdomains and parameters are dimmed — so you can spot spoofing instantly.
The only QR scanner that shows you what's inside before you open it. Detects phishing, spoofed domains, and malicious links — all in your browser.
Scan, analyze & stay safe. No uploads. No tracking.
Ready to scan a QR code?
Camera access is only requested when you click Start.
Your video stream stays on-device. We never transmit camera data.
Drag & drop a QR code image here
Tip: You can also paste an image from your clipboard (Ctrl+V / ⌘V)
Every QR code is analyzed before you open it. No blind clicks.
Every URL gets a Safety Review Card before you open it. The apex domain is boldly highlighted — subdomains and parameters are dimmed — so you can spot spoofing instantly.
Detects Unicode and Punycode characters in domain names that visually impersonate legitimate sites (e.g., pаypal.com using Cyrillic "а"). Warns you before you click.
Wi-Fi passwords, vCard contacts, and calendar events are parsed and displayed as rich, actionable cards — with "Copy Password", "Download Contact", and "Add to Calendar" buttons.
Enable Batch Mode to scan multiple QR codes in a single session. Export your results as a CSV or plain-text file for archiving or analysis.
Your camera feed and images never leave your device. Processing is 100% client-side using the jsQR library. Scan history is stored only in your browser's localStorage.
Scan from your device camera, drag-and-drop an image file, use the file picker, or paste an image directly from your clipboard with ⌘V / Ctrl+V.
QR phishing — or "quishing" — is when attackers embed malicious URLs inside QR codes. Unlike traditional phishing links, the URL is hidden until after you scan, making it impossible to vet visually.
Attackers place QR codes on printed invoices or posters pointing to credential-harvesting pages.
Phishing emails bypass URL filters by embedding a QR code image instead of a clickable link.
Criminals place stickers over legitimate QR codes in public spaces like parking meters and restaurants.
Cybercriminals use fake QR code mockups, deceptive stickers, and fake links to steal sensitive data. SaferScans acts as your real-time fake QR code detector.
SaferScans extracts the true apex domain embedded in the code. If a QR code pretends to represent a trusted organization or payment portal but routes to an unverified fake link, it is immediately highlighted with caution.
In public venues like parking meters, restaurants, or bus stops, criminals paste a fake QR code mockup sticker directly over legitimate codes. Always check QR code link destinations with our scanner before entering payment details.
While funny fake QR codes (like meme links or rickrolls) are harmless entertainment, malicious quishing attacks silently hijack accounts or trigger malicious downloads. Our on-device scanner reveals the payload before opening.
Use your camera for live scanning, upload an image file, or paste from clipboard. No camera permission is requested until you click "Start Scanner".
SaferScans decodes the QR code locally and runs our safety engine — checking the URL scheme, domain, shortener status, and Unicode characters.
A structured Safety Review Card appears. For URLs, the apex domain is highlighted. For Wi-Fi/contacts/events, you get a rich action card. Nothing opens automatically.
SaferScans is a free, privacy-first tool to scan QR codes from your camera, photo gallery, or clipboard. Every code is analyzed instantly on your device to protect you from phishing and malicious URLs.
Open saferscans.com in Safari or Chrome. Use the Camera tab for live scanning or the Upload tab to choose a saved photo or screenshot. No app installation required.
Drag & drop any QR image into the Upload tab, press Ctrl+V / ⌘V to paste from your clipboard, or scan directly with your webcam.
Pre-screens links for domain spoofing, homograph attacks, and hidden redirects before you open them.
All image processing runs locally in your browser. Camera feeds and images are never uploaded to any server.
Compatible with iOS, Android, Windows, Mac, and Linux without downloading browser extensions or native apps.
Free, private, and instant. No account needed. Your security is built in.