Is that QR code link safe to open?

It never opens the link. You paste the URL a QR code points to (the Camera app shows it before you tap), and the checker inspects the address itself — the protocol, the real domain, any look-alike tricks, shorteners, and embedded redirects — entirely in your browser. There is no network request on the check path, so nothing is fetched, logged, or sent to a server. It tells you what to be suspicious of before you decide to open it.

Quishing is phishing delivered through a QR code — on fake parking meters, fake "delivery failed" notices, restaurant table tents, and email attachments. A QR code is opaque: the destination is hidden in the pixels, so you cannot eyeball it the way you would a typed-out web address. The code can route to a spoofed login or payment page, and by the time you see it you have already tapped through. Reading and checking the URL first is the single most effective habit against it.

Non-HTTPS links; raw IP-address hosts instead of a domain name; punycode/internationalized domains used for homograph attacks (apple vs аpple); URL shorteners that hide the real destination; an "@" in the address that hides the true host; brand names buried in a subdomain (paypal.com.secure-login.ru); risky or unexpected file-download TLDs like .zip and .mov; and credential or payment keywords in the path. Each flag is explained so you understand the risk, not just a red light.

No tool can promise that. "Looks OK" means the address has none of the common structural red flags — but a clean-looking domain can still be a brand-new scam site, and a shortener can hide anything. Treat the result as a reason to slow down, not a guarantee. Never enter a password, card number, or 2FA code on a page you reached from an unexpected QR code; go to the organization’s official app or website yourself.

Scanning a QR code is a free operating-system call — iOS has done it in the Camera app since 2017 — yet the App Store is full of QR scanner apps charging $4.99–$9.99 per week for it, a category Apple has flagged as fleeceware since 2019. Swarmval QR Scanner keeps unlimited scanning free, adds scan-from-photo, searchable history, eight code formats, and built-in generation, and follows fair portfolio pricing: $4.99/month (3-day trial), $14.99/year, or $19.99 once — never weekly.

On iPhone, open the Camera app and frame the code without tapping — the detected link appears as a banner at the top or bottom of the screen. Read that address (or long-press to copy it) and paste it here before you open it. A scanner with searchable history, like Swarmval QR Scanner, also lets you review exactly what a past code pointed to.