Report a QR code

Scanned a code that led somewhere it should not have?

If a QR Code Harbor link took you to a phishing page, a malware download, a scam or something illegal, tell us here. A person reads every report. We can switch the code, page or file off so nobody else lands on it, and block the destination so no new code can point at it.

We only host the redirect, not the page it leads to. Reporting here stops the QR code; the site behind it is a matter for its host, and for Google Safe Browsing or your local authorities if money or credentials were taken.

What happens to a report

It is read by a person. Nothing is switched off automatically: a report is a claim, and a competitor could file one just as easily as a victim. The operator looks at where the code pointed when you reported it, and where it points now.
A blocked code stays blocked even if its owner re-points it. The owner can write to support@qrcodeharbor.com from the account that created it.
We store a hash of your connection’s address, not the address itself, to limit repeat reports. No account or email is needed. Reports are kept with the code’s history.
Codes are checked when they are created too. A destination that hides a username before the host name (a phishing trick) is refused outright, and a destination on a domain we have blocked is refused. When Google Web Risk is configured, destinations it lists are refused as well. How we handle data and abuse.

Scanned a code that led somewhere it should not have?

Report received

What happens to a report