Security and privacy · Guide

Check a QR link before entering details

A QR code is a link. After scanning, check the opened web address and whether the page belongs to the operating organisation before submitting a report or personal details.

Last reviewed:

On this page

Goal

Use an object's QR code without sending details to an unfamiliar page.

Before you start

  • You have scanned a QR code but have not entered any details yet.

Steps

  1. Read the address

    Look at the destination address in your browser. Compare its domain with a link you already know from the operating organisation. A familiar-looking heading alone is not enough.

  2. Check the page's purpose

    A valid object code may open an object page, report form, choice or checklist view. Decide whether the page fits your task only after checking the destination.

  3. Use a known route if unsure

    Do not enter details on an unfamiliar page. Open reporting through the organisation's official website or ask through a known contact.

Check the result

You enter details only on a confirmed reporting route or check a suspicious link first.

If something goes wrong

A label covers the original QR code.
Do not use the overlaid code. Tell the operating organisation where you found it.
The address differs from the organisation link you know.
Stop entering details and check the address through a known contact. Do not rely on the page design alone.

Common questions

Does a neat printed QR code prove the link is safe?

No. Check the browser destination and whether it belongs to the expected organisation.

Must every code open the report form?

No. The operator can set a different entry route for each code.