안전한 QR Code 스캔: 소비자 가이드
How to scan QR codes safely: URL preview checking, suspicious code indicators, and what to do if you scan a malicious code.
Safe QR Code Scanning: A Consumer Guide
As QR codes become ubiquitous, knowing how to scan safely protects you from phishing, malware, and privacy violations.
Before You Scan
Check the physical context: Is the QR code in an expected location? A QR code on a restaurant table is normal. A random QR code sticker on a lamp post is suspicious.
Inspect for tampering: Look for signs of sticker overlays — raised edges, different paper or print quality, codes placed over other codes.
Consider the request: Does scanning make sense in context? A "scan to pay" QR on a parking meter is reasonable. A "scan to claim your prize" QR on a random flyer is a red flag.
During the Scan
Preview the URL: Both iOS and Android show the decoded URL before opening it. Always check:
- Is the domain familiar and expected?
- Does it use HTTPS?
- Does the domain have a suspicious structure (e.g., paypa1.com instead of paypal.com)?
- Is it a URL shortener? (Less trustworthy because you cannot see the destination)
Use your built-in camera: The native camera app on iOS and Android is safer than third-party scanner apps, which may have their own privacy issues.
After You Scan
Check the page: Before entering any information, verify you are on the expected site. Look for: - Valid SSL certificate (lock icon) - Correct domain name in the address bar - Professional page design (though skilled attackers create convincing fakes)
Never enter sensitive data (passwords, credit card numbers, social security numbers) on a page reached via QR code unless you are certain of the destination.
What to Do If You Scanned a Suspicious Code
- Close the page immediately — do not interact with it
- Clear your browser cache and cookies
- If you entered credentials, change those passwords immediately
- If you entered payment information, contact your bank
- Run a security scan on your device
- Report the suspicious QR code to the location owner
Key Takeaways
- Check the physical context and inspect for tampering before scanning
- Always preview the URL before opening — both iOS and Android support this
- Use the native camera app, not third-party scanner apps
- Never enter sensitive data on pages reached via QR code without verification
- Report suspicious QR codes to the location owner