QR Codes for Your Profile: Making and Sharing Them Safely

A QR code is a handy bridge between the physical world and your online presence. Put one on a business card, a conference badge, the last slide of a talk or a sign at a market stall, and people can reach your profile or link page with a quick scan instead of typing an address.

The same convenience is why scammers like QR codes. The Federal Trade Commission has warned that "scammers hide harmful links in QR codes to steal personal information," and that a scammer's code "could take you to a spoofed site that looks real but isn't." People who know this are rightly cautious about scanning.

So a good profile QR code has two jobs: it has to scan reliably, and it has to look trustworthy to the careful people you most want to reach. This guide covers both, plus what to do on the other side, when you're the one scanning.

Decide where the code should point

A QR code is only as good as the address inside it. Before you make one, decide on a single destination that will still be right in a year, such as your profile's public web address, your personal website or a link-in-bio page you control.

Two practical points:

• Choose an address you can keep. Once a code is printed, you can't edit it. If the address inside it stops working, every card and poster with that code stops working too.
• Know exactly what the code contains. Before printing, scan a test copy and read the link preview. It should show the address you intended, not an address you don't recognize or control. If the tool you used put a different address inside the code, read its terms so you know how long that address will keep working.

If a platform offers to create a QR code for your profile, check its official help pages for how that code works before you print it.

Design it so it scans

DENSO WAVE, which announced the QR code in 1994 (then as a division of DENSO CORPORATION), publishes practical guidance on its official site. QR Code is a registered trademark of DENSO WAVE INCORPORATED. A few points matter for anyone printing a code:

• Leave a margin. DENSO WAVE says a QR code "requires a four-module wide margin at all sides of a symbol," where a module is one of the small squares in the pattern. That blank border, the "quiet zone," is often the first thing cut off by tight layouts.
• Use high contrast. Its FAQ says scanners use red light to read codes, so some color pairs simply fail; it says a red code on a white background, or a blue code on a green background, can't be read. Its advice is, "Basically, please print out your QR Codes with black on a white background."
• Be careful with logos and art. DENSO WAVE warns that overlaying an illustration or design deforms the code, which can make reading slow or impossible. If you add a logo in the center, test it on several phones before printing a large batch.
• Mind error correction. QR codes include error correction so a smudged or damaged code can still be read. DENSO WAVE describes four levels and says Level M, about 15 percent, is the one most frequently selected. Higher levels improve error correction but also add data, which makes the code bigger.

Shorter addresses also help. DENSO WAVE explains that as the amount of data increases, more modules are needed, resulting in larger codes. A short address keeps the pattern simple enough to scan at small sizes.

Help people trust your code

Cautious people are following the FTC's advice: inspect the address before opening a code found in an unexpected place, and don't scan codes in emails or texts they weren't expecting. Make that easy for them.

• Print the address as text next to the code, such as your name followed by your domain. People can type it instead, or compare it with the preview their phone shows.
• Make the preview recognizable. An address on your own domain or the platform's own domain is easier to trust than a string of random characters.
• Say what it does, for example "Scan to view my portfolio," right beside the code.
• Don't send QR codes by email or text. The FTC specifically says, "Don't scan a QR code in an email or text message you weren't expecting." In digital messages, a plain written link is clearer and more trustworthy than a code.

Protect codes you post in public

The FTC says people have reported scammers covering legitimate QR codes on parking meters with codes of their own. The same trick can be played on any public code. If your code is on a printed flyer, a shop window or a booth sign, check it now and then for stickers or overlays, and rescan it to confirm it still goes where you expect. Printing the address in text beside the code also makes a swap easier to notice.

When you're the one scanning

Profiles and QR codes go both ways, so it helps to know the FTC's guidance for scanning other people's codes. Its September 2026 consumer alert says:

• Inspect the URL. Many QR readers preview the link before opening it. Check it for misspellings and switched letters.
• Protect your phone by keeping its operating system and apps updated.
• Protect your accounts with strong passwords and multifactor authentication.

If you think you scanned a bad code, the FTC's steps are to stop interacting with the site or the person behind it, change your password right away if you entered it (and anywhere else you use the same one), check your card and bank statements for transactions you didn't make, and report it at ReportFraud.ftc.gov.

A quick pre-print checklist

1. The code points to an address you control and expect to keep.
2. A test scan's preview shows exactly the address you intended.
3. The code is dark on a light background with a clear margin on all four sides.
4. Any logo or styling has been tested on several different phones.
5. The address is printed in text next to the code, with a short note on what it opens.
6. You've scanned a printed proof at the actual size it will be used.

Key takeaways

• Point your profile QR code at a stable address you control, because printed codes can't be edited.
• Scan a test copy and read the preview so you know whether a generator added its own redirect.
• Follow DENSO WAVE's basics: a four-module quiet zone, black on white, and caution with logos.
• Print your address in text beside the code so careful people can verify it.
• Use plain links, not QR codes, in emails and texts, in line with FTC guidance.
• Check public codes for tampering, and report bad codes at ReportFraud.ftc.gov.

Sources - Federal Trade Commission, Scammers hide harmful links in QR codes to steal your information (December 6, 2023) — https://consumer.ftc.gov/consumer-alerts/2023/12/scammers-hide-harmful-links-qr-codes-steal-your-information - Federal Trade Commission, See a QR code parked somewhere? Don't scan it…yet! (September 3, 2026) — https://consumer.ftc.gov/consumer-alerts/2026/09/see-qr-code-parked-somewhere-dont-scan-ityet - DENSO WAVE, Point for determining the code area — https://www.qrcode.com/en/howto/code.html - DENSO WAVE, Error Correction Feature — https://www.qrcode.com/en/about/error_correction.html - DENSO WAVE, Information capacity and versions of the QR Code — https://www.qrcode.com/en/about/version.html - DENSO WAVE, FAQ — https://www.qrcode.com/en/faq.html - DENSO WAVE, History of QR Code — https://www.qrcode.com/en/history/