Public Wi-Fi QR codes are meant to remove friction. A cafe, hotel, airport lounge, campus building, coworking space, event venue, or clinic can print one card and let visitors join without typing a long password.
That convenience also creates a clean opening for scams. A fake code can send you to a rogue hotspot, a lookalike captive portal, a fake loyalty login, or a payment page that has nothing to do with the venue.
Use this guide when you are about to join public Wi-Fi through a QR code, or when you already scanned one and something felt off.
Public Wi-Fi QR risk by location
| Location | Normal QR use | Higher-risk pattern | |---|---|---| | Cafe or restaurant | Guest network, menu, loyalty page | QR opens a fake login or payment page | | Hotel | Room Wi-Fi card, lobby sign, conference network | Network name does not match front-desk instructions | | Airport | Lounge access, terminal Wi-Fi, travel services | QR asks for airline, email, or card details on an unfamiliar domain | | Campus | Library, classroom, visitor network | QR asks for school SSO credentials from a non-school page | | Coworking space | Guest access, meeting-room network | QR asks for payment or workspace login outside the official member portal | | Event venue | Temporary Wi-Fi card, exhibitor lounge, press room | Sticker or flyer does not match the organizer or venue |
1. Check the network name before joining
The safest Wi-Fi QR codes make the expected network obvious. The printed card, sign, or screen should show the network name in plain text, not just a square code.
Before joining, compare the network name with:
- the front desk or staff instructions
- the venue's official signage
- the in-room card or event packet
- the official app or member portal
- the name displayed in your phone's Wi-Fi settings
If the QR code suggests a network with a misspelling, extra word, generic name, or strange suffix, stop. Attackers often rely on tiny naming differences because visitors are tired, rushed, or distracted.
For hotel-specific steps, see Hotel Wi-Fi QR Code Scam and Hotel QR Code Scams.
2. Treat captive portals like login pages
A captive portal is the page that appears after you join some public networks. It may ask you to accept terms, enter a room number, type an email address, or log in through a venue account.
That page deserves the same caution as any other login page. Check the domain before entering anything. A legitimate venue portal should match the hotel, airport, campus, coworking provider, event organizer, or Wi-Fi vendor you expected.
Be careful if the portal asks for:
- email password or work SSO credentials
- payment card details for Wi-Fi that should be free
- loyalty account login before basic access
- app installation to continue
- remote support software
If the page asks for more than the venue said it would, disconnect and ask staff.
3. Do not pay from a surprise Wi-Fi QR page
Some venues charge for premium Wi-Fi, but unexpected payment prompts deserve extra scrutiny. A fake QR code can claim you need to pay a small fee, verify a card, or upgrade your connection. Small amounts are part of the trick; people are less likely to dispute them.
Before entering card details:
- confirm the price with staff
- check that the domain matches the venue or known Wi-Fi provider
- avoid short links and misspelled brand names
- use the venue's official app or front desk if available
- save the receipt if you do pay
If you already entered card information, use QR Code Credit Card Scam for immediate next steps.
4. Be stricter with work and school credentials
Public Wi-Fi QR scams get more serious when the page asks for workplace or school login details. A fake coworking, conference, library, or campus portal can harvest SSO credentials and use them later.
Do not enter work, school, email, or admin credentials into a Wi-Fi page unless you expected that exact flow and the domain matches the organization. If you are unsure, use cellular data and ask IT or venue staff.
Related guides:
- QR Code Scams at College Campuses
- QR Code Scams for Remote Workers
- QR Code Scams at Office Buildings and Coworking Spaces
- What to Do If You Scanned a QR Code in an Email
5. What to do if you already joined
Your risk depends on what happened after the scan.
- If you only joined a network, disconnect and forget it if anything looks wrong.
- If you entered a password, change it from the official site using a trusted network.
- If you entered payment details, contact your bank or card issuer.
- If you installed an app or profile, remove it and review device settings.
- If you used work or school credentials, notify IT quickly.
Do not keep troubleshooting inside the suspicious portal. Switch to cellular data, a trusted network, or the venue's verified Wi-Fi instructions.
Venue checklist for safer Wi-Fi QR codes
If you manage a public space, make the QR code easier to verify:
- print the network name next to the QR code
- include the official support desk, front desk, or venue contact
- avoid QR-only instructions
- remove old Wi-Fi cards and signs after network changes
- inspect stickers and table tents during daily opening checks
- tell staff what the official captive portal should look like
- provide a typed password backup for guests who do not want to scan
This reduces confusion for guests and makes fake codes easier to report.
See also
- How to Spot a Malicious QR Code Before You Scan
- QR Code Threat Map
- Fake Wi-Fi QR Code Scams
- Airport QR Code Scams
- Hotel Wi-Fi QR Code Scam
Before joining a public network from a QR code, preview the destination with QRsafer. Download it for iOS or Android.
Frequently asked questions
Are public Wi-Fi QR codes safe?
Many are legitimate, but you should verify the network name, destination page, and venue instructions before entering passwords, payment details, work credentials, or loyalty information.
What is the most common public Wi-Fi QR red flag?
A QR code that opens a network, captive portal, or login page with a name or domain that does not match the venue is a strong reason to stop and ask staff.
What should I do if I joined a suspicious Wi-Fi network?
Disconnect, forget the network, change any password you entered while connected, and contact your bank or card issuer if you submitted payment details.
Can QRsafer check Wi-Fi QR codes?
QRsafer can preview and check QR destinations before webpages open. If the QR code directly configures Wi-Fi, still verify the network name and password with the venue.