What to Do If a QR Code Opened a File Upload Form

If you have not uploaded anything

1. Close the form and do not upload IDs, receipts, account screenshots, photos, or documents yet.
2. Open the organization from a typed website, official app, known portal, or staffed contact.
3. Check whether the form destination, fields, and file request match the real process.
4. Use a non-QR upload path when the form involves medical, financial, school, insurance, or identity documents.

If the QR destination was a document portal, compare What to Do If a QR Code Opened a Document Upload.

If you uploaded files

• Save the QR code, URL, upload confirmation, emails, screenshots, and form title.
• Contact the real organization through a known phone number, account portal, or staffed desk.
• Review the account, claim, order, school, or payment process connected to the upload.
• Watch for follow-up messages asking for payments, passwords, one-time codes, or more documents.
• Consider replacing exposed cards, account numbers, or identity documents through the issuing organization if needed.

For insurance-related uploads, read Insurance Claim Form QR Code Scam.

File upload QR red flags

• The form asks for a driver's license, passport, medical card, bank statement, or student record without context.
• The domain does not match the school, clinic, insurer, venue, employer, or business.
• The page asks you to upload files and then pay a fee through an unrelated account.
• The upload form came from a public sticker, forwarded message, or support chat instead of a trusted portal.

Form owners can reduce risk with the QR Code Intake Form Safety Checklist and by linking to a typed official destination.

Frequently asked questions