Is the QR Code at Aldi Safe to Scan? Quick Answer + What to Watch For

Where Aldi legitimately uses QR codes

Aldi's QR code use is narrower than most major grocery chains — which actually makes it easier to spot a fake. Here is where you will genuinely encounter official Aldi QR codes:

• Weekly ALDI Finds ad (print and digital). Aldi's rotating “ALDI Finds” flyer sometimes includes a QR code linking to the digital version of the ad or a product landing page. These resolve to aldi.us or the Aldi app.
• Aldi app digital coupons. The Aldi app lets shoppers browse weekly specials and digital coupons. QR codes generated inside the app are safe — they are tied to your app session and never ask for additional personal or payment information outside the app.
• Product label QR codes. Some Aldi private-label products include a QR code on the packaging that links to nutritional information, sourcing details, or recipe ideas. These are generally safe and resolve to supplier or aldi.us domains.
• In-store promotional signage. Occasional in-store signs may include a QR code for a seasonal promotion or special deal. As with any physical QR code, verify the URL preview matches aldi.us before tapping.

The common thread: all legitimate Aldi QR codes lead to aldi.us or deep-link into the official Aldi app. If the URL preview shows anything else, treat it as suspicious.

The main scam: fake Aldi gift card and rewards QR codes

The single most common Aldi-branded QR code scam is a fake “$100 Aldi Gift Card” or “Aldi Rewards” promotion shared on social media, in group chats, and via SMS. A typical post looks like this:

“Aldi is giving away $100 gift cards to celebrate their anniversary! Scan the QR code below to claim yours before they run out — only 500 left!”

The QR code links to a convincing fake survey page that asks for your name, email, mailing address, and eventually a credit card number to “cover shipping” for the gift card. The gift card never arrives. Your card gets charged — often for a recurring subscription — and your personal information is sold to other scammers.

Why this scam works so well on Aldi shoppers

Aldi's customer base is loyal, deal-focused, and accustomed to finding genuine bargains. A free gift card from a brand they already love feels believable — especially when the post mimics Aldi's distinctive branding. Scammers also exploit the fact that Aldi does not publicize a loyalty program widely, so customers have no clear reference point for what a real Aldi promotion looks like.

The key fact: Aldi has no loyalty points program

As of 2026, Aldi does not operate a loyalty points or cashback rewards program in the United States. There are no “Aldi Points,” no “Aldi Rewards,” and no membership tier system. Any QR code offering to let you “earn points,” “redeem your Aldi Rewards,” or “unlock your VIP savings” is not from Aldi. Full stop.

The one-second check before you scan any Aldi QR code

Whether you are in the store, looking at a flyer, or reading a text, you can verify any Aldi QR code in under five seconds:

1. Check the source. Did you receive this QR code from Aldi directly — in the Aldi app, from official in-store signage, or in an authenticated Aldi email from @aldi.us? If it came from a social media post, a text message, or a forwarded chat, treat it as high-risk.
2. Preview the URL before tapping. After scanning, your phone will show a URL before opening it. It should start with aldi.us — not a URL shortener, not a random domain, not anything with hyphens in the brand name (e.g., “aldi-rewards.com” is not Aldi).
3. Use QRsafer to check it first. QRsafer decodes the QR code and runs the destination URL against threat intelligence before your browser ever loads it — catching phishing pages in under a second.
4. If the page asks for card details or personal info, stop. A legitimate Aldi digital coupon or ad page never asks for payment information just to view the content.

What to do if you already scanned a suspicious code

1. Close the page immediately if it looks unfamiliar or asks for personal or payment information. Do not tap any buttons — including “X” on some pages, which can trigger additional actions.
2. If you entered your credit or debit card details: call your bank's fraud line immediately, ask them to cancel the card, and dispute any charges. Credit card transactions are protected by the Fair Credit Billing Act; debit card disputes are covered by Regulation E if reported promptly.
3. If you entered personal information (name, address, email): monitor your email for follow-on phishing attempts and sign up for spam-call blocking on your phone.
4. If you entered login credentials for any service: change that password immediately on a trusted device and enable two-factor authentication.
5. Report the scam at reportfraud.ftc.gov and forward the text or social post to 7726 (SPAM) if it arrived via SMS.

Frequently asked questions