Decode the saved image before you forward or open anything
When a QR code arrives inside a screenshot, flyer, or chat attachment, you can read its payload without pointing a second phone at the first screen. Upload the image to the QR Code Scanner. The tool decodes the visible code and displays its text; if the result starts with http or https, it also shows an Open link button.
Decoding tells you what the image contains. It does not establish who created the code, who owns a website, or whether a later redirect is safe. That distinction matters when someone asks you to forward a “payment,” “account verification,” or “delivery” QR image. The FTC warns that QR codes can lead to spoofed sites, so treat an unexpected request as something to verify outside the code itself.
Start with a clean image and read the displayed payload
Save the image at its original resolution if possible. A cropped, blurred, heavily compressed, or partially covered code may not decode. In the scanner, choose the image file and wait for the result. If no code is found, use the original attachment rather than repeatedly enlarging a blurry screenshot; enlarging cannot restore missing QR modules.
For example, a colleague forwards a photo of a conference poster and asks for the registration address. Decode the photo, copy the displayed text, and compare the domain with the conference’s independently found website. If the code contains plain text, an email address, or a Wi-Fi-style string rather than a web address, the scanner displays that text but does not turn it into a browser link. That is useful because you can read the payload before deciding what to do with it.
Inspect a URL as text before opening it
If the result is a URL, pause at the domain name. Look for a name you expected, spelling changes, extra subdomains, or a link shortener that hides the final destination. A familiar word somewhere in a long address is not evidence that the site is legitimate. The scanner can expose the encoded URL, but it does not check reputation, certificates, redirect chains, login pages, or payment forms.
Suppose a QR image claims to be from a parcel company and decodes to https://parcel-status.example/.... Do not decide it is genuine just because the words look plausible. Instead, type the known company address yourself or open its official app, then find the tracking or account page there. For a request involving credentials, money, a download, or a device setup, use an independently obtained contact method to confirm the instruction.
Use the right tool boundary for camera and image scanning
The QR Scanner can use a camera as well as an uploaded image. Camera access requires your browser’s permission, and a poor angle, glare, or low resolution can prevent detection. With an image upload, the browser reads the selected file into a canvas to attempt decoding. Neither mode makes a risk decision for you.
This is also not a QR generator or a URL editor. If you need to create a code for a verified address, use the QR Code Generator and test the finished image on another device. If you are preparing a URL with special characters before putting it into a code, use the URL Encoder only when the receiving system expects encoded query values. Encoding a URL does not make an untrusted destination safer.
Check the context after a successful scan
A successful result is the beginning of the review, not the end. Compare the decoded destination with the message, poster, or organization that supplied it. Look for physical signs of a sticker placed over a printed code, urgency that pushes you to log in or pay, and requests that arrive unexpectedly. When the action is important, navigate through an official website or app you found independently instead of relying on the QR path.
Before forwarding the image to someone else, send the visible destination and the context you verified, rather than saying merely that it “works.” For instance, you might write: “The QR decodes to this domain; I confirmed the event’s official site uses the same domain.” If you cannot make that independent check, say that you decoded it but did not verify the destination. A decoded URL is not a safety rating.
Common questions
Can I scan a QR code from a screenshot?
Yes. Upload the saved image to the scanner. A clear, uncropped code is more likely to decode than a blurred or partial screenshot.
Does a decoded URL mean the website is safe?
No. It only reveals the encoded destination. Check important sites through an independently found official address or app before logging in, paying, or downloading anything.
Why does the scanner show text but no Open link button?
The tool only offers that button for results beginning with http or https. Other QR payloads can still be displayed as text for you to inspect.
Can this tool identify a fake QR sticker on a poster?
No. It reads the code that is visible in the image. Inspect the physical context and verify the destination with the organization through a separate trusted route.
What should I do if the image will not scan?
Use the original file when possible, avoid a partial crop, and check for blur or glare. If it still fails, do not assume the content is harmless; obtain the address from the sender or official source by another method.