What to Do If a QR Code Asked to Connect a Wallet
A wallet-connect prompt can be harmless in the right context, but it can also lead to risky signatures, token approvals, or transactions. The important question is what you did after the QR page opened.
First, separate the risk level
- You only saw the page: close it and verify from the official site or app.
- You connected a wallet: remove the connected site from wallet settings.
- You signed a message: review what the signature said and check the account from a trusted device.
- You approved a token: revoke the approval if your wallet or chain tools support it.
- You sent a transaction: save the transaction hash and contact the exchange, wallet provider, or platform involved.
If the QR code asked for words from your wallet backup, use What to Do If a QR Code Asked for a Recovery Phrase instead.
Wallet-connect warning signs
- The QR code came from a giveaway, airdrop, support chat, event sign, or direct message you did not expect.
- The page asks you to act quickly to claim tokens, verify ownership, or avoid losing access.
- The domain differs from the project, exchange, wallet, marketplace, or dApp you meant to use.
- The wallet prompt shows broad token permissions or a transaction you do not understand.
For broader examples, compare Crypto QR Code Scams and Bitcoin QR Code Scam.
What to do next
- Disconnect the site from your wallet if you connected it.
- Review token approvals, spending permissions, and recent transactions from a trusted wallet interface.
- Move remaining assets only if you understand the risk and fees, and avoid signing new prompts from the same page.
- Preserve the QR code, URL, screenshots, wallet address, and transaction hash for reports.
- Do not share a seed phrase, recovery phrase, private key, one-time code, or screen share with anyone offering to help.
QR codes can also lead to fake login pages. See Can a QR Code Steal Your Passwords?.
Frequently asked questions
Is connecting a wallet after scanning a QR code dangerous?
It can be. Viewing a page is different from connecting a wallet, signing a message, approving a token, or sending a transaction. Treat each step as higher risk.
What if I only opened the wallet-connect page?
Close the page, do not connect, and reopen the project or service from a trusted bookmark or typed address if you still need it.
What if I connected my wallet but did not approve anything?
Disconnect the site from your wallet, review connected apps, and watch for approval prompts. The risk is usually lower if you did not sign or approve.
Can QRsafer recover crypto?
No. QRsafer helps preview QR destinations before wallet, login, payment, and recovery pages open, but it does not recover funds or reverse blockchain transactions.
Preview wallet QR destinations before connecting
QRsafer helps preview QR destinations before wallet-connect, login, payment, recovery, and token pages open.