PanicStation.org
UK USA
us Personal safety & immediate danger

What to do if…
a stranger is pressuring you to scan a QR code or click a link in public

Produced and maintained by PanicStation.org Published: Last reviewed: Editorial policy USA guide

Short answer

Create distance first: move to a safer, more public place and do not scan or click anything while the person is close to you. If you feel threatened or cannot leave safely, call 911.

Do not do these things

  • Do not scan the QR code or click the link just to end the interaction.
  • Do not unlock your phone, log in, enter passwords, type payment details, or share one-time codes while the person is nearby.
  • Do not install an app or approve a download, profile, permission, or security prompt from the page.
  • Do not hand over your phone.
  • Do not follow the person somewhere quieter.
  • Do not stay close to argue or try to prove what the code is.
  • Do not assume a code or link is safe because it looks official.

What to do now

  1. Move away and create space. Walk toward a busy, staffed area such as a store counter, hotel lobby, station desk, or security booth.
  2. Use a short refusal and keep moving. Say No, I cannot help, or Please step back. You do not need to explain.
  3. Secure your phone and valuables. Lock your screen, put your phone away, and check your pockets and bag once you have created some distance.
  4. Ask staff or security for help if the person continues. Say: This person is pressuring me to scan a QR code and will not leave me alone.
  5. Call 911 if you need emergency help. Call if you feel threatened, are followed, or are blocked from leaving.
  6. If you already scanned or clicked, close the page or app. Do not enter login details, passwords, one-time codes, payment information, or other personal details. Do not approve a download, installation, profile, permission, or security prompt.
  7. If you entered a password, change it promptly. Use the official app or website that you open yourself, not the link you were shown. If you use the same password anywhere else, change it there too.
  8. If you entered financial details or approved a transaction, contact your bank or card issuer immediately. Use the number on your card or an official app or website that you open yourself, not the link you were shown.
  9. If you shared your Social Security number or information that could be used for identity theft, use IdentityTheft.gov. It can help you work through official recovery steps.
  10. Once you are safe, write down the basic details. Note where and when it happened, what the person asked you to do, and whether you scanned, clicked, entered information, or approved anything.
  11. Reporting can wait until you are safe. You can report suspected scams to ReportFraud.ftc.gov. For suspected cyber-enabled crime, you can also use IC3 at www.ic3.gov.

What can wait

  • You do not need to work out what the QR code or link really was while the person is nearby.
  • You do not need to confront the person, photograph them, record them, or prove anything in the moment.
  • You do not need to decide immediately whether to make a formal report.
  • You do not need to inspect every account until you are somewhere safe.

Important reassurance

You do not need to identify the person’s intent before walking away. Creating distance, refusing to scan, and asking for help are reasonable responses.

Scope note

These are first steps to help you disengage safely and reduce immediate digital and financial risk. Later decisions may need help from your bank, card issuer, mobile provider, device support service, or another appropriate specialist.

Important note

This is general information, not legal, financial, medical, therapeutic, cybersecurity, or other professional advice. If you need emergency assistance, call 911.

Additional Resources

Closely connected guides that may be useful during the same situation or its immediate aftermath.

About this guide

This guide was produced and is maintained by PanicStation.org using its published editorial process. Official and specialist sources are checked where relevant, and AI-assisted tools may be used for drafting, organisation, and consistency checks. The site operator remains responsible for publication, revision, and removal decisions.

Support us