Scan. Analyze. Decide.

QRRA

A QR code hides its next action. QRRA shows what it wants to do before you open, join, send, pay, or import anything.

QRRA gives a risk assessment, not a safety guarantee. You decide what happens next.

How QRRA Works

Preview first, then decide.

1

See the action first

See what the QR code wants to do before your phone does it: open a link, join Wi-Fi, draft a message, start a payment, launch an app, or import an authenticator key.

2

URL risk analysis

You can send URL QR codes to the QRRA server for a risk assessment. The server result then replaces the local preview.

3

You act, not the app

QRRA never opens, sends, imports, connects, or pays on its own. Review the target, then decide.

What QRRA Checks

Common QR risks, reviewed before you act.

Links and redirects

Review URL structure, redirects, suspicious downloads, and server risk signals.

Messages and email

Preview recipients and prefilled text before opening a compose screen.

Payments

Show recipient and amount where available before handing off to a payment app.

Wi-Fi

Preview network name and security type before changing device connectivity.

App links

Flag app launches, fallback URLs, login tokens, and install/download patterns.

OTP setup

Recognize authenticator setup content and treat secrets as sensitive material.

Privacy By QR Content Type

Different QR content needs different handling.

QR content QRRA handling
URL QR May be sent to server risk analysis when submitted.
Non-URL QR Previewed locally where possible.
Extracted URLs Previewed locally; submitted for server analysis only when you choose to scan a specific extracted URL.
OTP, Wi-Fi, payment Sensitive values such as keys and passwords are masked in supported QR previews.

Boundaries

What QRRA does not claim.

Mobile apps

Full QR review belongs in the mobile app.

Scanning and image-based QR review are coming in the mobile app.