See the action first
See what the QR code wants to do before your phone does it: open a link, join Wi-Fi, draft a message, start a payment, launch an app, or import an authenticator key.
Scan. Analyze. Decide.
A QR code hides its next action. QRRA shows what it wants to do before you open, join, send, pay, or import anything.
QRRA gives a risk assessment, not a safety guarantee. You decide what happens next.
How QRRA Works
See what the QR code wants to do before your phone does it: open a link, join Wi-Fi, draft a message, start a payment, launch an app, or import an authenticator key.
You can send URL QR codes to the QRRA server for a risk assessment. The server result then replaces the local preview.
QRRA never opens, sends, imports, connects, or pays on its own. Review the target, then decide.
What QRRA Checks
Review URL structure, redirects, suspicious downloads, and server risk signals.
Preview recipients and prefilled text before opening a compose screen.
Show recipient and amount where available before handing off to a payment app.
Preview network name and security type before changing device connectivity.
Flag app launches, fallback URLs, login tokens, and install/download patterns.
Recognize authenticator setup content and treat secrets as sensitive material.
Privacy By QR Content Type
| QR content | QRRA handling |
|---|---|
| URL QR | May be sent to server risk analysis when submitted. |
| Non-URL QR | Previewed locally where possible. |
| Extracted URLs | Previewed locally; submitted for server analysis only when you choose to scan a specific extracted URL. |
| OTP, Wi-Fi, payment | Sensitive values such as keys and passwords are masked in supported QR previews. |
Boundaries
Mobile apps
Scanning and image-based QR review are coming in the mobile app.