Is it safe to tap a tag in a public place?
Generally yes, because the worst a tag can do unaided is offer you an address. The habit that removes the remaining doubt takes a second: read the tag with a tool that shows the content instead of acting on it, then decide whether to follow what you see.
The worst it can do
Offer your phone an address. An iPhone presents it as a notification asking whether to open it, Android does the same from Android 17, and earlier Android versions open it directly.
It cannot read anything from the phone, cannot run anything, and cannot act after you walk away. Those limits are covered individually elsewhere in this section.
So the exposure is a link you did not choose, presented by an object rather than by a message, and the appropriate caution is the caution you would apply to any link.
The habit
Read rather than act. An application that displays what a tag holds turns an automatic prompt into an inspection, and it takes no longer than tapping normally would.
Take NFC Tools. On iOS it requires an iPhone 7 or later running iOS 15.6 or later, and the app must be launched manually. Background reading is available from the iPhone XS and XR onwards.
Look at the whole address, particularly the domain, because a plausible domain is the entire technique behind most deceptive links.
Then decide. Most of the time the answer is that it is a museum label or a poster and you carry on.
What deserves suspicion
A tag that does not belong where it is: a sticker added to a parking meter, a payment terminal, or a piece of public infrastructure that had no tag when it was installed.
A tag stuck over another tag or over printing, which is the physical signature of the only attack that actually happens.
A destination asking you to install something, sign in, or pay, which is where every harmful sequence goes and is the point to stop.
And a page that does not say who published it, which for a legitimate deployment is a failure and for a hostile one is the point.
Keeping it in proportion
Tags in public places are overwhelmingly museum labels, transport information, posters and product packaging. The base rate of hostile tags is very low.
They are also, in most places, less common than printed codes, which face the identical problem and attract none of the anxiety.
The proportionate response is a habit rather than avoidance: inspect, judge, proceed. Refusing to tap anything costs you the technology and gains you very little.
And if you tapped something and now regret it, the next page in this section explains what actually matters and what does not.
Frequently asked questions
Is it risky to tap a tag on a poster?
Rarely. The worst it can do is offer an address, and the habit of reading before acting removes the doubt.
How do I inspect a tag first?
Use an application that displays the content rather than following it. That turns a prompt into an inspection.
What is the warning sign?
A tag that does not belong where it is, or one stuck over another tag or over printing.
Are tags more dangerous than printed codes?
No. They present the same problem, and printed codes are more common and attract less caution.