Report abuse

A Graklink QR code is a redirect we operate, which means abuse of one is abuse of our infrastructure and we take it personally. Choose the route that matches what you found:

• Dangerous redirects: email abuse@graklink.com.
• Trademark and counter-notice matters: email legal@graklink.com.
• Security vulnerabilities in Graklink: email security@graklink.com.

We acknowledge every report within 2 business days. If you receive no acknowledgement after 2 business days, resend your report and copy Support at support@graklink.com.

Scams, phishing, and malware

If a Graklink QR code points somewhere dangerous (a phishing page, malware, a scam), email abuse@graklink.com with:

• The Graklink address (like graklink.com/example) or a photo of the QR code you scanned
• Where it sent you, if you know
• Anything else useful: where the QR code is posted, what the page asked for

We review every report. When a destination appears dangerous, our initial protective action may be to disable the redirect and show a warning while we investigate. That protective step is not the final resolution. A final resolution follows evidence review under ouracceptable use policy, and we restore the redirect if the report is not supported.

Trademark and IP claims

If someone has registered a Graklink address using your trademark (say, your brand name pointing at a store you don't run), email legal@graklink.com with:

• Your mark: the trademark at issue and, if registered, the registration number and jurisdiction (a USPTO number, for example). Common-law marks are considered too; include evidence of use.
• The address at issue: the graklink.com/... address and where it redirects.
• Who you are: your name, organization, role, and how we can reach you. Claims must come from the mark's owner or an authorized agent.
• A good-faith statement: that you believe the use is not authorized by you and that your claim is accurate.

Then this is what happens, with real timelines:

• We acknowledge your claim within 2 business days.
• If the claim is facially valid, we disable the address while we review. A redirect using someone else's brand loses the benefit of the doubt.
• We notify the address holder, who has 10 business days to respond with evidence of their own rights (their own registration, their own business name, a license).
• No valid response: the address is permanently retired or, at your request, transferred to you. Valid dispute: we tell you, and the parties take it from there while we follow any resulting agreement or order.

We also block obvious famous marks at registration. That filter is a speed bump, not a promise: no list catches everything, and many trademarks are ordinary words our customers use honestly. The process above is the real protection.

If your address was disabled and you think we got it wrong

Email legal@graklink.com from your purchase address with your side and your evidence. A human reviews every counter-notice. If we got it wrong, we restore the address and say so.

Security researchers

Vulnerabilities in Graklink itself go to security@graklink.com, per our security.txt. We read those fast.