A free QR code safety scanner that helps you think before you tap. Scan any QR code, answer five quick questions, and get a clear safety verdict.
Download on the App StoreIsQRSecure helps everyday people stay safe from QR phishing, also known as quishing. Built by a security consultant who saw too many people falling for these scams.
Point your camera at a QR code to reveal the hidden URL before you visit it. See exactly where it's trying to take you.
The app breaks down the URL and checks for suspicious domains, encoded content, brand impersonation, phishing keywords, and known malicious indicators.
Answer five quick awareness questions based on real phishing indicators. Each question helps you assess whether the link is trustworthy.
Get a clear rating: Safe, Caution, or Dangerous. The verdict is based on your self-assessment, helping you make an informed decision.
No data leaves your device by default. No analytics, no tracking, no accounts. Everything is processed locally on your phone.
Practical tips on QR safety, man-in-the-middle attacks, how to read URLs, payment scams, and more. Education that fits in your pocket.
Three steps between scanning a QR code and making an informed decision.
Open the app and point your camera at any QR code. The app instantly reveals the URL hidden inside.
The app checks the URL against known threat indicators, suspicious patterns, and exploited hosting platforms. Any issues are flagged clearly.
Five quick questions help you assess the context. Based on your answers, you get a safety verdict and can choose whether to proceed.
IsQRSecure is provided free of charge, on an "as is" basis, without warranties of any kind, whether express or implied, including but not limited to the warranties of merchantability, fitness for a particular purpose, or non-infringement. The developer does not provide technical support, maintenance, or updates as an obligation. Any updates released are at the sole discretion of the developer.
This app and website are intended for educational purposes only. They do not guarantee the detection of phishing or malicious content. Users are solely responsible for their own decisions when choosing to visit any URL. Community-reported URLs are user submissions and have not necessarily been verified as malicious.
To the fullest extent permitted by law, the developer shall not be held liable for any damages, losses, or consequences arising from the use of this app or website.
No, you're not. This is a personal project I built with the assistance of AI tooling and a few hundred pounds over a couple of days. There is no business model, no data harvesting, no advertising, and no investors.
The intention is simply to protect people and make them aware of the dangers of QR phishing. As a security consultant, I see people falling for these scams regularly, and there was no free, straightforward tool to help them at the moment it matters most.
This is my opportunity to give something to the world and make a difference, for which I am honoured.
URLs reported as suspicious by IsQRSecure users.