Can a QR code redirect me to a site that steals my login?

A QR code is simply a visual encoding of a URL. Scanning one with your phone is equivalent to clicking a link you cannot read in advance. Malicious QR codes placed on flyers, stickers over legitimate codes, or shared digitally can direct you to convincing phishing sites that mimic bank logins, cryptocurrency exchanges, government portals, or social media platforms. You enter your credentials on the fake page, which are immediately captured. Some sites also attempt to install malware through the browser. The risk is heightened when codes appear in unexpected places — emails, random flyers, or stickers placed on restaurant tables or parking meters over the original code.