A QR code only encodes information; it does not make a link or payment trustworthy. Check why you received it and inspect the destination or beneficiary shown before you proceed.
When an email sends you to your phone
A code to ‘verify your account’ can take you to a fake login page while hiding the link until you scan it. This is called quishing. QR codes also have legitimate uses, so check whether you initiated the action and can find it in the known provider app. Do not install a new scanner for an unexplained code.
A web link and a payment code require different checks
For a web link, examine the full destination; a preview is no proof of safety. Avoid scanners that automatically open unknown pages. For a QR invoice, compare the beneficiary, IBAN, amount and reference displayed by your banking app with a confirmed bill.
Stop unexpected approvals
Do not scan a code to prevent an alleged account lock unless the provider confirms the process independently. A request to connect a new device can grant access. If you have already signed in or approved a payment, secure the account or contact the bank; deleting the code cannot undo an approval.
Check what the code contains and what you are authorising, not how professional it looks.
Sources and further help
The linked information supports this guide. It does not imply that these organisations work with or endorse MailMigo.