Trust & safety

Safe to scan

Every AriaQR code is checked, can be reported, and has a public page anyone can open before they trust it.

Paste the link a code opens, or just the part after aqr.li/.

Code check

Is this code safe to scan?

Live and not flagged

It opens

brand.com

Verified domain: brand.com

Safety check

Checked today

Open brand.com

Made

Edited

Every day

Checked three times

Against Google Safe Browsing when a code is made, whenever its link changes, and every day after.

Anyone can report a code

Every warning and check page has a report link. Three different people put a short link or free code behind a warning until we review it.

This link is blocked

Back to safety

Blocked

Check before you continue

Back to safety

Continue

Warning

A bad link stops

Free codes and free short links on Safe Browsing are blocked. A code on a paying account, already printed on a menu or a pack, shows a warning and its owner is emailed at once. The warning lifts once the site is clean.

✓ Verified domain: brand.com

Work email

jane@brand.com

Website tag

DNS record

TXT ariaqr-verify

Verified domains

Brands prove they own their website. Their codes then show the domain they proved, never a name someone typed. Verify yours

Check before you scanariaqr.com/check/…

ariaqr.com/check/…

Print the mark

Owners download a mark for each live code and print it beside the code. It sends people to that code’s check page, which always shows the live status.

Before you scan any code

A phone preview showing the real domain next to a lookalike domain

Read the address before you open it.

Learn more →

A QR code in an email leading to a fake sign-in page

Codes in emails asking you to sign in are the classic trap.

Learn more →

A sticker with a different code stuck over the real code on a parking meter

A sticker over a printed code is a warning sign.

Learn more →

The rules in full

An address on Google Safe Browsing can’t be used when a code is made or edited.
Live codes’ destinations are checked again daily. Free codes and free short links that turn up on Safe Browsing are blocked; codes on paying accounts show a warning, their owner is emailed, and the warning lifts once Safe Browsing no longer lists the site or the owner points the code somewhere safe.
Each person counts once per code. Reports about paid codes always go to a person, so nobody can switch off a business’s printed code by reporting it.
A person reads every report within two business days; a clear phishing or malware case is usually handled within hours.
A code we review and clear can’t be put behind a warning by reports again for 30 days.
Domains are proved by a work email at the domain (public and throwaway mail never counts), a tag or file on the website, or a DNS TXT record. Shared hosting addresses can’t be verified. Proof is looked for daily; missing for 14 days, the badge comes off.
The check page never shows who owns the account.
Phishing, malware, scams and impersonation are not allowed: acceptable use. Security issues with AriaQR itself: security. Report a code: report.