NON-CERTIDOX QR CODE ANALYSIS

A QR Code Can Be Dangerous.

Check where it leads with Certidox before you trust it.

A fake court notice can look official while its QR code leads to a phishing or fraudulent payment website. Your phone’s Camera app can open that link without checking whether it is trustworthy.

Do not scan QR codes with your phone's Camera app.Use the Certidox app first to inspect the destination and any potential risk warnings.

Why a QR Code Can Be Dangerous

A QR code is not a security seal. It may contain a web address, and that address can point to a fake payment page, a phishing form or another unsafe destination. A convincing logo, a signature or an official-looking letterhead does not make the link safe.

Certidox lets you check the QR destination before opening the link. The app can display the URL and flag potential risks. This is a safety check, not a guarantee that a website is safe or that a third-party document is authentic.

Example 1: A Court Notice That Looks Real With a Malicious QR Code

The purported Illinois court notice in this LinkedIn post includes a QR code next to a request to settle an unpaid balance. Its court heading, seal and signature are designed to look official. The QR code is the danger.

The actual Certidox scan shown here found no Certidox certification and warned that the destination appeared to be a phishing attempt.

DANGER! Don't scan this QR CODE with your Camera App!Use Certidox to examine the link instead.
Original purported court notice shared on LinkedIn. The QR code is visible and unchanged. Do not open its destination with your Camera app.
Certidox iPhone scan: This QR code wasn't issued by Certidox. The URL appears to be a phishing attempt.
Actual Certidox scan result. It warns that the destination appears to be a phishing attempt. This is the assessment captured at that time.
Don't pay. Don't enter personal information. Contact the relevant court through an official website or telephone number you have found independently. Certidox’s warning is a risk assessment, not a conclusive forensic finding that this website is malicious.

Example 2: A QR Code Leading to an Ordinary Municipal Website

The supplied DeKalb County Business Registration Affidavit contains a QR code linking to information about a municipal ordinance. Its link is not a Certidox certification code.

In this scan, Certidox described the destination as a legitimate municipal-code website. That is an assessment of the link, not proof that the document was officially issued or that the website will always remain safe.

Business Registration Affidavit BL Form 104, containing a QR code for municipal ordinance information
DeKalb County form supplied for the example. The external QR code is visible. Download the supplied PDF.
Certidox scan on iPhone reports a QR code not issued by Certidox and describes a municipal-ordinances website
Actual Certidox scan result. The app describes the link as a legitimate municipal-ordinances destination. That does not authenticate the form or guarantee that the destination will remain safe.

The PDF was supplied for illustration; it has not been independently authenticated as an official current government document.

Check a QR code in three steps

  1. Open the Certidox app. Use its QR scanner instead of following a QR link from your phone's Camera app.
  2. Scan the QR code. Certidox indicates whether it recognizes a Certidox certification record. For other QR codes, it can display the destination and available risk information.
  3. Read the result before you act. If the destination looks suspicious or asks for unexpected payment or credentials, do not visit it. Independently confirm the request with the alleged sender.

The screen examples illustrate the app's displayed assessments at the time of capture. Destination content and risk can change later.

How to interpret the result

  • “This QR code wasn't issued by Certidox.” There is no Certidox certification record associated with that code. This alone neither proves fraud nor authenticates the linked document.
  • “The URL appears to be a phishing attempt.” A warning to investigate and avoid following the suspicious link. It is a risk assessment, not a judicial or forensic finding.
  • A destination described as legitimate. The URL appears consistent with an ordinary website in that example. It is not proof that the page or document is authentic or that the destination cannot change.
Do not rely on the QR code's appearance. Even a link that looks familiar can lead to a changed or deceptive website, and a correct destination does not prove the contents of a document.

QR link analysis is not document certification

Non-Certidox QR code

Question: Where could this link take me, and does the destination show warning signs?

The app may display the URL and assess potential risks.

No Certidox origin, content or live certification-status proof.

Certidox-certified QR code

Question: Who certified this exact content, when, and what is its current status?

Recipients can verify the recorded certifier, exact certified content, date and status, then compare the certified reference with what they received.

Certification evidence does not guarantee the underlying statements are factually true.

Both uses belong to the same principle: verify before relying on it. But checking a destination and verifying a certified document answer different questions.

Frequently Asked Questions

Why should I avoid scanning a QR code with my phone's Camera app?

A phone's Camera app may offer to open a QR code destination without assessing whether the website is trustworthy. Use Certidox to inspect the link and any potential risk indicators before deciding whether to visit it.

Does “not issued by Certidox” mean the QR code is fraudulent?

No. It means the scanned QR code does not provide a Certidox certification record. It may lead to a legitimate website, a suspicious destination or something else.

Can Certidox warn me about a possible phishing destination?

The app can display the destination URL and identify potential risk indicators for some non-Certidox QR codes. A warning is an assessment, not proof that a particular website is malicious.

If Certidox describes a destination as legitimate, is the document authenticated?

No. A favorable link assessment is not proof of who issued the document, the accuracy of its contents or the safety of the website in the future.

What should I do if a QR code asks for payment or personal information?

Do not open the link or enter information if the request is unexpected or suspicious. Contact the alleged organization using a telephone number or website obtained independently from a trusted source.

Can a legitimate website be reached through a non-Certidox QR code?

Yes. The DeKalb County example points to a municipal-ordinances website, which the displayed Certidox result describes as legitimate. That assessment does not certify the underlying form.

Does link analysis guarantee that a QR destination is safe?

No. Websites, redirects and threats can change. Use the analysis as a precaution, and independently assess requests involving money, credentials or sensitive data.

How is a Certidox-certified QR code different?

A Certidox certification QR code provides access to a certification record. Recipients can check the recorded certifier, exact certified content, certification date and current status, then compare the certified reference with what they received.

Open Certidox Before You Open a QR Link

Use Certidox to inspect QR codes before opening their destinations. If a document is Certidox-certified, check its recorded origin, exact content, date and current status before relying on it.

The two app results are historical screenshots. QR destination risk can change. Neither authority shown here endorses Certidox; link analysis does not certify third-party documents.