Understand the decision

If your business displays QR codes in a public location, include them in routine visual checks. Compare the display with an approved reference and look for an unfamiliar sticker, replacement sign or changed instruction. The FTC has described scams involving legitimate codes being covered by other codes. Staff do not need to investigate a suspicious destination themselves; they need to recognise a change and know who is responsible for resolving it.

A practical workflow

Keep a reference image and the intended destination available to the person opening the venue or stand. If a display appears altered, stop directing visitors to it and notify the owner. Replace it through the approved process, then test the restored code. Record the location and time of the issue so other displays can be checked if needed. Offer a readable official address or staff-assisted alternative while the display is unavailable, without asking visitors to scan the questionable code.

Imagine this

Hypothetical example

A venue employee notices a new sticker over the code on a reception sign. They remove the sign from use, alert the manager and provide visitors with the official website address. The manager replaces and tests the display before returning it to service.

Make it practical.

Use this checklist as you read. Checks are not stored.

References & further reading

Further reading: FTC: Scammers hide harmful links in QR codes ↗

Published by Tap Tap Go. Product availability and eligibility vary by programme and market. About our stories.