First-pass QR scan: start with a harmless destination

Before scanning a code from an unfamiliar source, use a harmless known QR to confirm that camera permissions and scanning work. Then scan the target code and inspect the decoded text before opening a link. Check the domain for lookalikes, and avoid entering credentials merely because a printed code appears official. If the issue is readability, test at the actual print size and lighting. A scanner's successful decode is a convenience, not a security endorsement.