Why susQR Belongs in Your Bookmarks Bar

Almost every other link you tap gives you something to judge it by. An email shows a sender. A search result shows a domain. A text message at least shows you the words around the link. A QR code shows you a square of black and white pixels, and that is the entire preview. You find out where it goes by going there.

That gap is the whole reason QR code scams work. The sticker over the parking meter, the fake table tent in a restaurant, the code printed in a letter about an unpaid toll: none of them look wrong, because there is no version of a QR code that looks wrong. The attack does not need to defeat your judgment. It just needs to reach you before your judgment has anything to work with.

susQR closes that gap. Point your camera at a code, or upload a picture of one, and it decodes the link and inspects it before you ever open it. It is a web page, so there is nothing to install, and it works the same on a phone in a parking lot as it does on a desktop.

What comes back is not a single yes or no. susQR checks the destination against VirusTotal, which runs it past more than ninety security vendors at once, and against Google Safe Browsing, PhishTank and URLhaus. It follows redirects, so a link that quietly hops through three domains before landing somewhere unpleasant has nowhere to hide. It checks how old the domain is, which matters more than people expect, because scam infrastructure is usually days old rather than years. It can pull a sandboxed screenshot of the page through urlscan.io, so you can see what you would have loaded without loading it. Then it puts a number on all of that, from 0 to 100, with the underlying signals shown rather than hidden behind the score.

The practical case for bookmarking it rather than just remembering it is timing. QR codes get scanned in exactly the moments when you are least inclined to be careful: standing at a meter with the engine running, sitting down to order, holding a letter that says something is overdue. A tool you have to go find is a tool you will skip. A tool already in your bookmarks bar, or saved to your phone's home screen, is one tap, and one tap is cheap enough that you will actually use it.

It is free, it does not ask you to make an account, and uploaded images are deleted within 24 hours. There is no upgrade nag standing between you and the answer.

A reasonable habit: scan anything printed in a public place where a sticker could have been added, anything that arrived unsolicited in the mail or by message, and anything asking for payment or login details on the other side. Codes on packaging from a company you already deal with are lower risk. The rule is not to check every code forever. It is to check the ones where being wrong is expensive.

You can find it at susqr.com. Put it next to your password manager, in the row of things you keep because the one time you need them, you need them immediately.