DeltaBind · Business technology
A QR code is still a link.
The FTC’s warning about harmful QR codes remains a useful reminder: check the destination and the request before signing in or paying.
Published October 14, 2026.
In December 2023, the FTC warned that scammers can use QR codes to direct people to harmful or impersonating sites. The format is convenient, but it does not make the destination trustworthy. A code on a message, sign or document deserves the same attention you would give a link in an unexpected email.
Check what happens after the scan
A camera preview may show the destination before opening it. Look for an unexpected domain or a request that does not fit the situation. A code that claims to provide a menu but asks you to sign in to a work account should make you pause. Do not treat scanning as permission to complete every step that follows.
Use another route for a sensitive task
If the code relates to an account, invoice or payment, open the service through an address or app you already know. At a physical location, ask staff if a sign or sticker looks unusual. The goal is to verify the request independently rather than relying on the appearance of the code.
Make it part of ordinary awareness
Include QR codes in staff and family conversations about links. There is no need to make every scan feel dangerous. A simple habit of checking the destination and avoiding unexpected credential requests is more useful than assuming that a different link format requires an entirely different kind of judgment.
A practical next step
Preview the destination when your device offers it.
Verify unexpected sign in or payment requests independently.
Treat an unfamiliar QR code like an unfamiliar web link.
Source: FTC: Harmful links hidden in QR codes. Reviewed October 14, 2026. This article discusses reporting published December 2023. Product features and availability can change.
Get help making it work.
DeltaBind can help you turn the next step into a practical plan for your business.