Browse the guides

Before opening a food-pack QR link, inspect where it wants to take you

Check an unexpected food-package QR destination before opening it, entering account details or accepting a payment request.

A QR code can take you from a familiar package to an unfamiliar website. Before following an unexpected destination, pause at the address preview if your scanning interface provides one. Your immediate task is to decide whether to open the destination, not to judge the food from the code's appearance.

Compare the destination with your expectation

The FTC's QR-code guidance recommends inspecting unexpected links, watching for misspellings or swapped characters, and checking urgent requests through a contact route you already know. A familiar logo printed beside a code does not supply the missing destination evidence.

Ask what the code was supposed to do. A recipe link that suddenly requests account verification, payment details or an app installation raises a different question from a page that simply displays a recipe. You do not have to complete the requested action to investigate the mismatch.

A fictional sticker example

Imagine a sticker claiming that a reward expires immediately. Its preview shows bramd.example, while the independently known brand address is brand.example. These are non-live teaching examples. The swapped letter is a reason to stop; the urgency should not shorten the check.

ObservationDecision
Destination differs from the known addressDo not proceed through that code
Request unexpectedly asks for login or paymentVerify the request independently first
Preview is incomplete or absentTreat the destination as unverified

Instead of following the sticker, use a manufacturer website or contact detail you already trust from a separate source. Ask whether the promotion exists and which destination it uses. A support link supplied by the same suspicious destination is not an independent check.

Record a decision without overstating it

A useful note is “destination unverified; used the known website.” It does not need to accuse the brand or identify a criminal. Equally, correct spelling alone cannot establish that a website or its current content is safe. This process checks a link decision; it does not authenticate the packaged food.

QR codes are not inherently malicious. The reason to pause is the unexplained destination or request, especially before providing information. If you cannot resolve that question, leave the code unused.

Use a direct route to a food app

If you want to explore Ingredi AI, use its verified App Store listing or Google Play listing and review the current offer there. This recommendation does not assert that Ingredi scans QR codes or provides malware protection.

Sources

Compare labels