Report Abuse
Last updated
Summary
- If a QR code made with QRdx leads somewhere harmful, use the report form. You don't need an account, and your report stays anonymous unless you leave your email.
- We review reports within 24–48 hours. Codes that break our rules are switched off for everyone, and their owner can't switch them back on.
- Links that Google Web Risk lists as malware or phishing are switched off as soon as they're reported.
- Don't enter passwords, card numbers or one-time codes on a page you reached from a QR code you don't trust.
What to report
Anything that breaks the Acceptable Use Policy. The report form offers these reasons:
- Phishing or a fake login page
- Scam or fraud
- Malware or a harmful download
- Adult content
- Illegal goods or services
- Copyright or trademark infringement
- Hate speech or violent extremism
- Spam
- Something else
How to report
- Open the report form. Every page a dynamic QRdx code opens links to it, including password screens and "campaign ended" pages, and the form fills in the link for you when you arrive from one of them.
- Paste the code's short link, hosted page link or 7-character short code. Links on a customer's own domain work too.
- Choose a reason and add any details that help, up to 2,000 characters.
- Leave your email address if you'd like to hear what we did. It's optional.
The form uses Cloudflare Turnstile to block automated reports and accepts a limited number of reports from one connection per day. If the form doesn't fit what you need to tell us, for example a copyright (DMCA) notice, a legal request or evidence that doesn't fit in a text box, email support@qrdx.dev with the link, what's wrong and how to reach you.
What happens next
- Automatic check. When a report names a working QRdx code that redirects, we check its destination with Google Web Risk straight away. If the link is listed as malware, phishing or unwanted software, the code is switched off immediately and queued for a person to confirm.
- Review. A person reviews every report within 24–48 hours.
- Action. If the code, page or file breaks our rules, we switch it off, block the file, or suspend the account behind it. A switched-off code shows scanners a neutral "This QR code is no longer active" page, and its owner can't turn it back on.
- Follow-up. If you left your email, we tell you what we did.
Several reports of the same code from the same person within a day count as one.
What we do to prevent abuse
- Destinations of new and edited dynamic codes are checked with Google Web Risk and offline checks. Links listed as malware, phishing or unwanted software, and dangerous link types, can't be used.
- During an account's first 7 days it can create up to 30 dynamic codes an hour, and its codes that point to URL shorteners, bare IP addresses or lookalike domains stay switched off until we've reviewed them.
- Our Never-Hostage Guarantee means we never switch codes off over billing. Abuse is the one exception.
Static codes and other services
A static QR code holds its content directly, so it never passes through QRdx and we can't switch it off. If it points to a harmful website, report that site to its host, or to Google Safe Browsing. If the code wasn't made with QRdx, report it to the service that made it.
If your code was switched off
If you think we got it wrong, email support@qrdx.dev with "[appeal]" in the subject and the code's short link. We'll look at it again and reply.
Changes: 1 November 2026. Aligned with the report form and review process, added the automatic Web Risk check, static codes and appeals, and moved the list of banned content to the Acceptable Use Policy.