How to scan and use a QR code on your phone, safely
A QR code is a quick way to open a web address on your phone. Your phone's own camera can read it; no extra app is needed.
Scanning
- iPhone: open the Camera app and hold the phone so the code is on the screen. Tap the link that appears.
- iPhone, other way: in Control Center, tap Scan Code. Not there? Touch and hold Control Center, tap Add a Control and choose Scan Code.
- Android: open the Camera app and point it at the code. Tap the link or bubble that appears. You can also use Google Lens.
- Android, other way: swipe down from the top of the screen and tap Scan QR code in Quick Settings. Menu names can differ a little between phone makers.
Why care: QR codes can hide fake links
- You cannot see where a QR code leads until you scan it. Criminals put fake codes in emails and text messages, or stick them over real ones, for example on parking meters. This is called "quishing".
- A fake link can lead to a page that looks real and asks for your password or payment details.
Five safe habits
- Look at the web address your phone shows before you open it. Does it belong to the organisation you expect?
- Do not scan a QR code in an email or text message you were not expecting.
- In public places, check that the code is not a sticker on top of another one.
- Use the scanner that comes with your phone, not a separate scanner app.
- Be suspicious if a page asks for more information than seems needed. To log in, rather type the address yourself or use your own bookmark.
Keep your phone updated, and use two-step verification on your important accounts: then even a stolen password is not enough.
Lost or stolen device?
If you are a client of ours and your phone or computer has crashed, or was lost or stolen, let us know as soon as possible. Write to us using the contact details on our contact page, or use the direct email address or telephone number we gave you (we do not publish these). We can lock your account with us straight away, reset your login password, and help you set everything up again.
Sources (checked 20 October 2026)
- Apple: scan a QR code with iPhone. support.apple.com
- Google: scan QR codes (Pixel). support.google.com
- US Federal Trade Commission: scammers hide harmful links in QR codes. consumer.ftc.gov
- UK National Cyber Security Centre: QR codes, what is the real risk? www.ncsc.gov.uk
Version 12 · Published 20 October 2026 · © 2026 Habsburg Digital Ltd