Veriq

A QR code isn't like a written link: you can't see where it leads until you scan
it. Scammers know this, which is why QR phishing ("quishing") is on the rise on
parking meters, restaurant menus, fake packages, and posters stuck over
legitimate QR codes.

Veriq is a QR scanner that checks the link before you open it. When a code
contains a link, Veriq never opens it on its own. First it analyzes the link and
shows you the actual domain, in large print, along with any red flags. You decide
whether to proceed, using an explicit "Open Link" button.

WHAT IT DETECTS BEFORE OPENING ANYTHING
• Unencrypted connection (http)
• The host is a numeric address instead of a domain name
• "@" in the address, used to disguise the actual destination
• Invisible characters or text-reordering characters
• Letters from other alphabets that mimic the Latin alphabet (a Cyrillic "а"
instead of an "a")
• Domains that closely resemble a well-known name through small spelling changes
• Links that start a direct download of an installable file
• Non-standard ports and suspicious subdomain strings

CHECK LINK SHORTENERS, IF YOU ASK
Link shortening services hide the actual destination. If you tap "Check Actual
Destination", Veriq follows those redirects (with a limit on the number of hops
and a timeout) to show you where they really lead, before you open anything. This
is the only feature that makes a network request on its own, and only if you
enable it.

ALSO INCLUDES
• Instant preview of text, Wi-Fi, contacts (vCard), email and phone numbers, with
a copy option
• QR code generator: creates codes for links and text

Veriq gives you warnings based on how an address is built. It is not antivirus
software and it cannot guarantee that a link is safe. The final decision is
always yours.