EcommerceAudit

Menu & Signage Audits

Audit venue QR codes at scale to catch stickers swapped by attackers.

Start with 500 free creditsDocumentation

Malware QR scan · 1 credit per lookup · no monthly fee

Venue codes

Table 4OK
EntranceSwapped
BarOK

How it works

1

Send the QR image

Upload an image containing a QR code. Encrata decodes the code and extracts the URL it hides.

2

We scan the destination

The decoded link is resolved and scored exactly like a URL scan, following redirects and checking reputation feeds.

3

Act on the verdict

Learn where the code points, and how risky it is, without ever pointing a phone at it. One credit per scan.

One call, structured answer

Menu & Signage Audits runs on the malware qr scan lookup at 1 credit per lookup. Same API key, same JSON shape as every other Encrata lookup.

  • Decodes the QR and scans the destination in a single call
  • Defends against quishing on posters, stickers and emailed codes
  • Same verdict, risk score and indicators as a direct URL scan
  • 1 credit per scan, with free cached repeats of the same code
Terminal
curl -X POST "https://developer.encrata.com/api/malware/qr/scan" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -F "image=@poster-qr.png"
response.json
{
  "kind": "qr",
  "verdict": "suspicious",
  "score": 68,
  "decoded_url": "https://pay.acme-invoice.co/settle",
  "final_url": "https://pay.acme-invoice.co/settle",
  "credits": 1
}

More malware qr scan use cases

View all
secure-login.coQuishing

Decoded, not scanned by phone

Quishing Defense

Decode QR codes hidden in emails and posters and scan the destination before anyone scans them

CybersecuritySecurity
acme.com/eventMatches poster

Poster Verification

Verify printed QR codes on signage and flyers point where they claim to

EnterpriseVerification
pay.acme-invoice.coTampered

Caught before money moves

Payment QR Checks

Screen payment QR codes for tampering and redirection before money moves

FintechFraud
Start with 500 free credits
$curl https://developer.encrata.com/api/lookup -H "Authorization: Bearer YOUR_API_KEY" -d '{"e": "satya@microsoft.com"}'