A comprehensive guide to understanding BinRo, why pre-scan safety inspection matters, and how to use every core feature to protect yourself against deceptive QR codes.
What is BinRo?
BinRo is a public QR code safety scanner, link checker, and community trust verification platform available on Web, Android, and iOS — built as the “Truecaller for QR codes” with the mission “Know Before You Scan” (“Pehle BinRo. Phir Scan.”). Founded by Ahmed Sameer Binan (a 20-year-old tech entrepreneur from Kasaragod, Kerala, India), BinRo acts as a protective shield for your phone camera — letting you see the exact link, payment recipient, and community safety rating inside any QR code before you open it.
The Problem We Solve
Quick Response (QR) barcodes are now everywhere — printed on restaurant menus, parking meters, payment checkouts, transit passes, and marketing posters. Because standard camera applications automatically open whatever link is encoded, users are often redirected before they can verify where they are going.
Attackers exploit this blind trust through an attack vector known as quishing (QR phishing). Criminals print deceptive stickers and paste them over legitimate QR codes in public places, diverting victims to credential-harvesting login pages, malware downloads, or altered payment recipients.
BinRo solves this problem by placing a calm, zero-trust safety layer between your camera and the destination. Instead of blindly launching a browser, BinRo holds the code for inspection, analyzes the destination for known threats, and displays the true details so you remain in control.
Core Features & Functionality
Pre-Open Inspection
When you scan any code, BinRo decodes the payload into clear, readable text. You can inspect the complete destination URL, domain name, query parameters, or plain text without triggering any network requests or executing untrusted scripts.
Trust Scores & Community Ratings
Every destination is evaluated using multi-layered heuristic checks, known threat blacklists, and community feedback to generate a transparent 0 to 100 Trust Score:
- Safe (80 – 100): Verified legitimate domain or harmless text with no security flags.
- Caution (50 – 79): Newly registered domain, mixed community reports, or sensitive financial requests. Proceed with care.
- High Risk (0 – 49): Flagged as phishing, malware, deceptive redirect, or reported fraudulent payment.
Payment & UPI Defense
Financial QR codes (such as UPI, PayPal, SEPA, and crypto wallets) are parsed with specialized checks. BinRo displays the merchant or payee name, highlights whether a payment amount is pre-filled, and identifies potential tampering before you proceed to your banking app.
Community Threat Reporting
If you encounter a fraudulent QR code or a malicious sticker, you can submit a community report with one tap. Reports are aggregated to update trust ratings and protect other users across the network in real time.
Private Mode (Incognito)
Toggle Private Mode in the scanner whenever you want to inspect a destination without recording the scan to your synchronized account history.
Organized Scan History
All standard scans are automatically saved for your reference. You can search, filter by content type (payments, URLs, contacts, WiFi), review past trust ratings, or delete records at any time.
How to Use BinRo
- Point & Scan: Open the Scanner tab and align the QR matrix within the viewfinder frame. You can also tap the gallery button to select an image or screenshot from your device.
- Inspect the Results: Review the decoded destination card. Check the Trust Score, verify the displayed domain, and read any community comments.
- Open with Confidence: If the destination is verified safe, tap "Open Destination" to continue in your browser or payment app.
- Report Suspicious Codes: If something looks suspicious or a physical sticker appears to cover an existing code, tap "Report" to warn the community.
Field Safety Checklist
- Check for Physical Stickers: Run your finger lightly over QR codes in public places like parking meters, restaurant tables, and street kiosks. If there is a raised sticker overlay, verify the destination carefully before entering any data.
- Inspect the Full Domain: Scammers often use typosquatted domains (e.g. misspelled brand names) or excessive subdomains to disguise fraudulent websites.
- Never Enter Credentials Blindly: Legitimate payment codes do not require you to enter email passwords, bank PINs, or recovery phrases to proceed.
- Verify Pre-filled Amounts: When scanning a payment QR, always confirm that the requested amount matches your actual bill before authorizing the transfer.