Report abuse
Found a QRCodeKIT QR code or short link that leads to phishing, malware, a scam or spam? Tell us at [email protected] or with the form below. We review every report within 6 hours.
Links we accept reports for
uqr.to: our short-link domain since 2009, used by codes made in the legacy app.
qrkit.co: the short-link domain of the current QRCodeKIT app.
Branded domains: customers on paid plans can serve their codes from their own domain, such as qr.example.com. If the code was made with QRCodeKIT, report it here.
Not sure who made the code? Report it anyway. If the link is not ours and you left your email, we tell you where to report it.
Report a QR code or short link
Only the link and the reason are required. Leave your email if you want a reply.
Prefer email? Write to [email protected] with the same details.
What counts as abuse
Phishing: pages that ask for passwords, card numbers or bank details while posing as someone else.
Malware: links that download a file or an app you did not ask for.
Scams and fraud, including fake payment pages and stickers placed over a genuine QR code.
Spam and unsolicited advertising.
Impersonation of a brand, a public body or a person.
Illegal content.
Intellectual property claims go to [email protected], as set out in our Terms.
What to include
The full short link, for example uqr.to/abc123.
The address it redirected to, if you saw it.
Where and when you found the QR code.
A photo of the code or screenshots, sent by email.
Your email, if you want a reply.
What happens next
We review every report within 6 hours. If the link breaks our Terms, we block the short link, so every printed copy of the code stops working, and we suspend the account when the case calls for it.
We work with PhishLabs, Google and the Amazon security team to find and stop malicious links, and we cooperate with law enforcement. If you left your email, we reply when the review is done.
If the QR code is yours
If your code was blocked and you think it is a mistake, or you think someone else got into your account, email [email protected] from the address on your account.
For security researchers
Report vulnerabilities in QRCodeKIT to [email protected]. Our security.txt file lists the same contact.
Report it to other services too
The page a phishing link leads to is usually hosted somewhere else. Reporting it helps browsers warn other people:
Google Safe Browsing: report the destination page.
APWG: forward phishing emails to [email protected].
Who we are
QRCodeKIT is a product of Mobile Leaves Corp., used by 1M+ companies. Our short links have run on uqr.to since 2009, every short link is served over HTTPS, and QRCodeKIT has been certified to ISO/IEC 27001.
Questions about reporting
Is uqr.to a scam?
No. uqr.to is QRCodeKIT’s short-link domain, in use since 2009. Like any link shortener, it can be misused by a third party. If a uqr.to link took you somewhere suspicious, report it here and we review it within 6 hours.
Can I report a QR code if I only have the printed code?
Yes. Email a photo of the code to [email protected] and say where you saw it. We can read the link from the photo.
How long does a review take?
We review every report within 6 hours of receiving it.
Will you tell me the outcome?
If you leave your email, we reply when the review is done.
Do I need an account to report abuse?
No. Anyone can report, and the form works without an email address.
Still stuck? We’re here.
Tell us what you’re trying to do and a person will answer.
