A QR code is only a link in a square
A QR code looks like a little square of dots. The phone scans it and opens a link. The problem: you do not know where, until you scan. A scammer puts a QR in a car park, in mail, on a “prize”, in chat: “Scan and win.”
The same rule as with a link in an SMS: I scan only when I know who I trust.
Safe scanning:
- a menu in a restaurant you can see on the spot — at the table, not a sticker over a sticker
- school / an event — a teacher says “scan this poster”
- a parent shows a code from an official page at home
Unsafe:
- a sticker on a parking machine (a fake one over a sticker)
- a QR in a message “you won”
- “Scan for free” from a stranger in a game lobby
After scanning, a fake page can open that wants a password. If you already scanned and the page wants a password — close it. A parent. Do not type a password.
Shortened links
bit.ly, tinyurl — a shortened address. You do not know where it leads until you open it. Better: a parent or open the service yourself from an address you know.
On a phone: press and hold the link → show a URL preview. If the message text and the address do not fit, you do not click.
In a restaurant: if the QR looks like a sticker stuck over another sticker, do not scan. Ask the staff or a parent.
What to say
“They sent a QR for a prize. I am not scanning. I will show a parent.”
“The link leads somewhere else than the message says. I am not clicking.”
How it fits the projects
🏫 Campaign. A QR from a stranger = no. I check a link with an adult.
📱 Audit. Settings: open links in a preview, if it is possible.
Family rules. I do not scan a QR from messages.
Now you 💪
With a parent: an example of a safe QR (school, a restaurant) vs. a description of an unsafe one (a message, an extra sticker). Without scanning stranger codes from the internet.
-
Learn to press and hold a link and read the URL preview.
-
A sentence: “I do not scan a QR from a stranger.”
-
One sentence about QR into the rules or the campaign.
Check: QR = a link. Scan only from a trusted source. A password on a page from a QR = close it.
What to take from this lesson
- I do not scan a QR blind.
- A sticker stuck over another = suspicious.
- A shortened link = check the preview.
- A password after a QR = no, a parent.
© 2026 Ing. Martin Polak / AlgoRhino · 콘텐츠 이용 약관