@viva2022 Think of a QR code as bitly URL (or any of the other URL-shorteners). You don't know where the bitly URL will end up (and the surrounding text is not necessarily accurate, either), and you can't know until you actually get to the site, and you also don't know that the QR code URL will go to your bank even if it starts with "mybank", the rest of the URL may be ".com.iamevilhaxor.foo/myevilhack" (translated into something completely nice and comfort sounding, of course).
You would not be able to tell reliably if it contains any tracker information, frequently all such information is encoded in a way that means you have to pick it too pieces (and even that might not work), and as Tarquin mentioned earlier this week in another thread, three English words can be used to identify trillions of unique individuals without anyone being any wiser by inspecting the URL.
For that matter, many (actually, most) URLs legitimately pass through many points on their way to the real site, especially if there is some payment involved (e.g. if you use the QR code on one advertisement, one company gets paid a bonus, if you use another a different company gets paid), and those URLs will NEVER go directly to a URL you will recognize as belonging to the site you think you are going to, it will belong either to the advertising agency, or a third-party site trusted by both to do accurate counting of URL usage (for reference, that is how ALL advertising URLs work, that clicked advertisement URL for Nike never go direct to NIke's web site). These URLs will be long, complex, and they will never contain the destination URL in plaintext, or even in encoded text, and the hostname will effectively be "you-have-never-heard-of-us-before-and-might-never-again.foo". IOW: inspecting the URL won't provide you any information about where you are going.
Only the simplest URLs (e.g the ones to threads here in the forums) go direct to the expected web site, most (especially advertisement, QR codes, bitly URLs) play several rounds of ping-pong around the planet before they finally load a web page. And you can't tell until you arrive whether or not you have arrived where you expected to arrive.
It is not a question of "criminals" doing this; it is a fact of life that today everybody (and their friend, brothers, sisters, aunt, uncles, parents, and grandparents, etc.) are doing it as part of doing business on the web.
Bottom line: You can never be sure where a URL will take you.
