Skip to main content
QR GUARDIAN

Protection

Protection, layer by layer.

QR Guardian treats every scan as untrusted until proven otherwise. This page explains exactly what happens in the milliseconds between pointing your camera and seeing a verdict.

The path of a scan

  1. 01

    Camera decodes the QR on-device

  2. 02

    Payload is classified — URL, WiFi, contact, text, intent

  3. 03

    Local layers analyze: gate, blocklist, heuristics

  4. 04

    Cloud reputation is merged, if you consented

  5. 05

    One verdict: SAFE, CAUTION, DANGER or UNVERIFIED

    • SAFE
    • CAUTION
    • DANGER
    • UNVERIFIED

What the heuristics look for

  • Typosquatting — paypa1.com instead of paypal.com
  • Homograph attacks — Cyrillic letters disguised as Latin
  • Punycode domains hiding their real name
  • Trusted brands appearing in fake subdomains
  • Open redirects that bounce you to a second destination
  • Direct downloads of executable files
  • Unusual ports and right-to-left character tricks
  • Premium SMS numbers and crypto payment requests

Weighted signals produce the verdict — a single strong signal or several weak ones can raise DANGER. On DANGER, the open button does not exist.

Get it on Google Play