What to Do If a QR Code Asked for Your Bank Login
A bank-login prompt after a QR scan deserves immediate caution. Scanning alone is not the same as account compromise, but entering a password, one-time code, or transfer approval can put the account at risk.
If you did not enter your login
- Close the QR page and do not continue through any support chat or payment prompt.
- Open your bank using the official app, bookmark, or typed domain.
- Check recent transactions, sign-ins, transfer recipients, cards, and alerts.
- Report the suspicious QR code to the business, sign owner, bank, or venue where it appeared.
For bank-specific scam patterns, see Bank QR Code Scam.
If you entered the username or password
- Use the real bank app or website to change your password if the bank allows it.
- Review recent transfers, bill payments, linked accounts, cards, and contact changes.
- Remove unknown devices, sessions, or trusted browsers if your bank exposes that setting.
- Call the bank through the number on your card, statement, or official website.
If the page also asked for a verification code, compare What to Do If a QR Code Asked for a One-Time Code.
Bank-login QR red flags
- The QR code appeared on a sticker, flyer, parking sign, mailed notice, or unsolicited message.
- The URL is a lookalike domain, short link, or redirect chain instead of the bank's real domain.
- The page asks for a password, one-time code, debit card PIN, or full account number too early.
- The scan creates urgency around a refund, delivery, parking ticket, utility bill, or account lock.
If the QR code asked for a password outside a bank context, see I Scanned a QR Code and It Asked for My Password.
Frequently asked questions
Is it dangerous if a QR code asked for my bank login?
It can be. A QR code that opens a bank login page may be legitimate only if you expected it and the domain is the bank's real domain. Unexpected bank-login prompts should be treated as high risk.
What if I saw the bank login page but did not enter anything?
Close the page, open your bank from the official app or typed website, and check recent activity. The risk is lower if you did not submit credentials or codes.
What if I entered my bank login after scanning?
Open the real bank app or website, change your password if available, review recent activity, remove unknown devices, and contact the bank's fraud or security team.
Can QRsafer protect bank-login scans?
QRsafer helps preview QR destinations before login, payment, transfer, and account-recovery pages open, but your bank remains the source of truth for account activity.
Preview login QR destinations before opening them
QRsafer helps preview QR destinations before login, payment, transfer, and account-recovery pages open.