Is a QR code on a restaurant table safe to scan?
Usually yes, but fraudsters sometimes place fake QR stickers over legitimate menu codes. Check that the sticker looks original and verify the URL before entering any personal details.
Last reviewed: 1 June 2026
Explanation
Restaurant QR menus became ubiquitous after the pandemic and are generally safe. However, scammers place fraudulent QR code stickers over genuine ones, directing diners to phishing pages that mimic payment or loyalty reward pages and collect card details. Before scanning a table QR code, look at whether the sticker appears to be placed over another, whether the label is professionally printed (consistent with the restaurant's branding), and after scanning, check the URL in your browser matches the restaurant's real domain. You should never enter payment card details on a page that opens from a restaurant QR code — legitimate restaurant payment systems use verified payment terminals, not QR-code-triggered web pages.
Common red flags
- QR code sticker is placed on top of or covers another code
- Sticker looks different from other branded materials in the restaurant
- Scanned URL does not match the restaurant's known domain
- Page asks for card payment before you have received or ordered food
What to do now
- Inspect the QR code physically before scanning
- Check the URL that opens and close if it looks unfamiliar
- Alert staff if you suspect a sticker has been placed fraudulently
- If you entered card details on a suspicious page, call your bank immediately
Frequently asked questions
Should I use a QR code scanner app with a preview feature?
Yes — scanner apps that display the destination URL before opening it give you a chance to check whether the link looks legitimate before proceeding.