You get handed a receipt at a coffee shop. There is a QR code at the bottom, right below the total and above the "thank you for your visit" line. You have seen these on receipts for years. You have probably never scanned one, or maybe you did once, got taken to a survey that asked you to rate your experience on a scale of one to ten, and closed the page after the second question.
Most people walk past that little square without thinking about it, which is fair, but the thing it connects to varies wildly from one store to the next and sometimes from one receipt to the next at the same store. Some of them are useful. Some of them are marketing. And a growing number of them, especially on receipts you did not expect to receive, are not from the store at all.
What the QR code actually links to
Technically speaking, a QR code on a receipt is holding a URL and nothing else, just a web address encoded into a pattern of black and white squares. Point your phone's camera at it, and what happens is the camera decodes those squares back into a regular web address, and then a little banner pops up asking if you want to open it. It opens in your browser, or sometimes in an app if one is installed that recognizes the domain. The code does not store your purchase history, your payment details, or your personal information. It stores a link, and sometimes a transaction identifier that lets the destination page pull up the details of your specific purchase from the store's system. [1]
What you see when you open that link falls into one of six categories, and most stores use the code for only one or two of them at a time.
Surveys and customer feedback
This is the most common use of receipt QR codes at large retail and restaurant chains, and the reason the code exists on most of the receipts you have been ignoring.
The code takes you to a short survey, usually five to ten questions, asking about your experience. How was the service? Was the store clean? Did you find what you were looking for? Would you recommend us? The survey is tied to your specific receipt, which means the store can connect your answers to the location, the date, the time of day, and sometimes the cashier who served you.
The incentive for completing the survey varies. Fast food chains often offer a free item or a discount on the next visit. Retail stores sometimes enter you into a monthly gift card drawing. Some surveys offer nothing at all, which is why most of them go unfinished.
A man buys a sandwich at a fast food restaurant. The receipt has a QR code with the text "Tell us about your visit" printed next to it. He scans it, answers seven questions about the speed of service and the temperature of the food, and receives a code for a free drink on his next visit. The whole thing took about ninety seconds.
Loyalty program enrollment and points
Some stores use the receipt QR code as a shortcut to loyalty program signup. What the code does is remove the cashier from the conversation entirely. The customer does not have to wait while an employee reads off the rewards tiers from a laminated card taped to the side of the register, and nobody hands them a flimsy plastic card they will forget about by the time they get to the car. The code opens a signup page. Name, email, phone number. The account exists before the customer reaches the parking lot, and if the store's POS software was configured correctly, which, to be fair, it sometimes is not, the purchase they just made already shows up as their first points earning transaction. Two minutes ago they had no account. Now they have one with a balance on it.
If the store already has a loyalty app, and at this point a surprising number of them do, the QR code might just bounce you to the app store so you can download it. Or it sends you to a web version of the same rewards portal, a stripped down page where you can check how many points you have and see if there is anything worth redeeming that week.
A woman buys running shoes at a sporting goods store. The QR code on her receipt says "Join Rewards." She scans it, enters her email, and receives a confirmation that the purchase she just made earned her 200 points toward a future discount.
Digital receipt copies
The QR code links to a web page or a PDF that contains a digital version of the receipt you were just handed on paper. Out of all the things a receipt QR code can do, this one is probably the most plainly useful, and it is the version that matters when the paper copy ends up faded in a wallet pocket, lost somewhere in a bag, or destroyed because it went through the washing machine in a pair of jeans.
What you get on the digital version is more or less everything the paper receipt already shows, the store name, the date, the individual items, the prices, how you paid, and the transaction number, though in a fair number of cases the digital copy actually includes more than the paper one does, because registers abbreviate product names to fit on narrow thermal paper and the digital version can spell them out in full.
If you ever need to make a warranty claim or bring something back, having that digital copy sitting in your email or saved as a screenshot on your phone is the kind of backup that takes maybe five seconds to set up, costs you nothing, and can save you a trip to customer service.
Warranty registration
Electronics retailers, appliance stores, and hardware stores sometimes print a QR code on the receipt that links directly to a warranty registration page. The page is often prefilled with the model number and the purchase date, pulled from the transaction data encoded in the QR code's URL, so the customer only needs to add their name and contact information to complete the registration.
This is one of the more genuinely useful receipt QR codes, because warranty registration typically requires the exact information the receipt contains, the item, the date, and the retailer, and the QR code eliminates the step of typing it all in manually.
Promotional offers and coupons
The QR code links to a coupon, a discount code, or a promotional landing page for an upcoming sale. This is the most overtly commercial use of the receipt QR code, and it is also the one customers are most suspicious of, because scanning a code "for a coupon" can also mean signing up for an email list or creating an account you did not intend to create.
You cannot always tell from the QR code itself whether the destination is a coupon or a data collection form wearing a coupon as a hat. One way to figure it out is to watch what happens after you scan. If the page immediately wants your email and will not show you any offer until you type it in, the store was not really trying to give you a discount. They wanted your email address, and the coupon was just the thing they dangled to get it.
Return and exchange portals
Returns are another use, though fewer stores have adopted it so far. The idea is that the QR code on the receipt opens a page where you can initiate the return yourself. A form asks which item, why you are returning it, and depending on the store, it might spit out a prepaid shipping label right there or offer to schedule a carrier pickup for the following afternoon. It is the kind of thing you can take care of at home at whatever hour works for you, no phone call involved.
Online retailers were the first to do this, usually by putting a QR code on the packing slip inside the shipping box, but physical stores are picking it up too, especially the ones that process a lot of returns and want to shift some of that volume away from the in store returns counter and onto a self service flow.
The security problem you should actually worry about
The QR code on a receipt from a store you just visited is almost certainly safe. The code was generated by the store's POS system, printed on the store's paper, and links to the store's own domain. The risk is not with those codes.
The risk is with QR codes that show up in places where you did not expect them, or on receipts and documents you did not ask for, because a QR code is just an image, and anyone can print one that points anywhere.
QR code phishing, which the security industry calls "quishing," accounted for roughly 12% of all phishing attacks worldwide in 2025, up from less than 1% in 2021. [2] A NordVPN survey reported by CNBC found that 73% of Americans scan QR codes without verifying where the link leads before it opens. [3] The FTC issued a consumer alert in December 2023 specifically warning about scammers placing fake QR codes over legitimate ones on parking meters. [4] In June 2025, New York City's Department of Transportation issued a separate advisory after at least one fraudulent QR code sticker was found on a ParkNYC meter. [5]
The quishing risk on a receipt specifically comes from two scenarios.
The first is a fake sticker placed over the real QR code on a receipt or a posted sign. The customer scans what they believe is the store's survey or loyalty page and instead lands on a credential harvesting site that looks enough like a real page to trick them into entering personal information.
The second is a QR code on a receipt or document you did not expect to receive. Packages arriving at your door with a QR code on the packing slip, when you did not order anything, have been flagged by the FBI as a social engineering tactic. [6]
A woman finds a sticker with a QR code on a parking meter. She scans it to pay for parking. The code takes her to a site that looks like the city's parking payment page but is actually a phishing page that collects her credit card number. She does not realise the code was fake until the charge shows up from an unfamiliar merchant two days later.
What should a small shop owner know about receipt QR codes?
If you run a small business and you are thinking about adding a QR code to your receipts, the technical setup is simple, most modern POS systems can generate a QR code on the receipt automatically, and free QR code generators can create a static code you print on every receipt if your system does not support it natively.
The harder question is what the code should link to. A code that links to a feedback survey you actually read and respond to is worth printing. A code that links to your Google review page can help build your online presence. A code that links to a loyalty signup page gives customers a reason to come back.
A code that links to a generic landing page the customer did not ask for and does not benefit from is not going to get scanned, and if it does get scanned and the customer feels like the destination was not what they expected, the code has done more damage to the relationship than printing a blank receipt would have.
The rule is the same one that applies to every other customer touchpoint. The code should link to something the customer wants, not just something the business wants the customer to see.
5 receipt QR code mistakes businesses make
1. Linking the QR code to a page that is not mobile friendly
Every receipt QR code is scanned with a phone. If the destination page does not load properly on a mobile screen, the customer closes it immediately and does not try again.
2. Using the same static QR code for months without checking whether the destination still works
Links break. Pages get taken down, or the domain registration lapses and nobody notices. A customer who scans your code and ends up staring at a 404 error, or worse, one of those ad covered parking pages that domain registrars throw up on expired sites, is going to feel like you wasted their time. And the frustration is worse than if the code had not been there at all, because the customer actually tried to engage with it.
3. Printing a QR code with no context about what it links to
If the receipt just has a bare QR code with nothing printed next to it, no label, no explanation, almost nobody is going to scan it. People want to know what they are getting before they bother. "Tell us about your visit" works. "Save a digital copy of this receipt" works. A blank code with no context? That is just a pattern of dots between the total and the store's address that everyone ignores.
4. Using the QR code as a disguised email signup
This one happens all the time. The QR code says "Get 10% off," and the customer scans it, but the landing page will not show the coupon until they enter an email address. The coupon does not show up until the email goes in. It takes the customer about three seconds to understand that the code was never really about giving them 10% off anything. This kind of bait erodes trust with the customer faster than just not printing a coupon code in the first place would have.
5. Not testing the QR code on actual thermal paper
QR codes printed on thermal paper can be harder to scan than codes printed on regular paper, especially if the contrast is low or the code is printed too small. Test the code on the actual receipt paper your printer uses before rolling it out to customers.
Frequently asked questions
Does the QR code on my receipt contain my credit card number or payment information?
No. A receipt QR code contains a URL and sometimes a transaction identifier, but it does not contain your credit card number, your bank details, or any payment data. The transaction identifier links to the store's system, not to your financial accounts. [1]
Is it safe to scan the QR code on a receipt I just got at a store?
In the vast majority of cases, yes. The code was generated by the store's POS system and printed on the store's receipt paper. The actual risk with QR codes is not the ones on receipts from stores you just visited, it is the ones that show up on stickers placed over legitimate codes, or on documents and packages you did not expect to receive.
What is quishing, and should I worry about it on receipts?
Quishing is QR code phishing, a type of attack where a malicious link is hidden inside a QR code. It accounted for roughly 12% of all phishing attacks globally in 2025. [2] On a receipt you just received at a store you visited, the risk is very low. On a sticker, an unsolicited package, or an unexpected email, the risk is real.
Can I use the QR code on a receipt to get a digital copy for my records?
If the store set up the code for digital receipt delivery, yes. Scanning the code takes you to a web page or a PDF with a digital version of the receipt. Not all stores use the code for this purpose, so the only way to know is to scan it and see where it goes.
Should my small business add QR codes to receipts?
It depends on what you link to. A code that takes customers to a feedback form, a loyalty signup, or a digital receipt copy adds value. A code that takes them to a page they did not expect or did not ask for does not. If you add a code, print a short description next to it so the customer knows what scanning it will do.
The Bottom Line
The QR code on your receipt is a link, and like any link, what matters is where it goes. Most of the time it goes to a survey, a loyalty page, or a digital copy of the receipt, and scanning it is harmless. Occasionally it goes to a promotional page or a data collection form that the customer did not expect, and the store's intentions are more commercial than helpful. And in a small but growing number of cases, the QR code on a receipt or a posted sign is not from the business at all but from someone trying to steal information, which is why previewing the URL before opening it is becoming a habit worth building.
The simplest way to think about it is the same way you would think about any link someone hands you. If you know who sent it and why, scan it. If you do not, preview it first. And if the receipt came with a package you did not order, do not scan it at all.