QR Codes for Small Business: Smart Uses and Pitfalls

A QR code is the quickest bridge between something physical, like a menu, flyer or shop window, and something online. Used well, it saves customers typing and gives you a simple way to measure interest. Used carelessly, it leads to dead links, frustrated scanners and even scams. Here is how to get QR codes right.

Hand holding a smartphone with a QR code displayed on its screen — A QR code should take customers somewhere useful in one scan.

Key takeaways

Static codes point permanently to one destination; dynamic codes redirect through a service, can be edited and tracked, but stop working if that service ends.
Point codes to a page on your own domain where possible, so you stay in control of the destination.
Test every code before printing, with several phones, at the real size and in the real lighting.
Watch for "quishing": criminals sticking fake codes over real ones. Check your codes regularly and print a short URL as a backup.

QR codes have been around for a long time, but they became an everyday habit for many customers once phone cameras could read them without a separate app. Today most smartphones scan them straight from the camera. That makes them a cheap, flexible tool for almost any small business, from a café to a plumber's van.

QR code generators and services change their features and terms regularly. Treat any type of tool mentioned here as a category, and check the current terms before committing to one.

How QR codes work

A QR code (short for Quick Response code) is a square pattern of black and white modules that stores data, usually a web address. Your phone's camera reads the pattern and offers to open the link.

1994 The year QR codes were invented by Denso Wave, originally to track vehicle parts in manufacturing Denso Wave

QR codes include error correction, which means a code can still be read even if part of it is dirty or covered. That is why you sometimes see codes with a logo in the middle. Higher error correction makes a code more robust but also denser, so there is a balance to strike.

Static vs dynamic QR codes

This is the most important decision, and many businesses make it without realizing.

Static codes

A static code encodes the final destination directly. If the code holds https://example.com/menu, the phone goes straight there. Static codes are free to create, never expire and do not depend on any company staying in business. The downside: you cannot change the destination after printing, and you get no scan statistics from the code itself.

Dynamic codes

A dynamic code encodes a short link owned by a QR code service. That service then redirects to your destination. You can change the destination at any time and see how many scans you get. The catch is dependence: if you stop paying, the service changes its terms or closes, every printed code can stop working at once.

Factor	Static code	Dynamic code
Can you change the destination?	No	Yes
Scan tracking	Only through your own website analytics	Built into the service
Depends on a third party?	No	Yes, the redirect service
Best for	Permanent links on long-lived printed items	Campaigns where you need flexibility or reporting

Pro tip

Get the benefits of both by making a static code that points to a short page on your own domain, such as example.com/menu. You can change what that page shows or set up a redirect on your website at any time, and your analytics can track visits using campaign tags in the link. No third party can break your printed codes.

Smart ways to use QR codes

The best uses save customers effort at the exact moment they want something. Some ideas that work for many small businesses:

Menus and price lists. Link to a mobile-friendly page, but keep printed menus available for customers who prefer them or have no phone signal.
Reviews. A code on receipts or the counter that opens your review page directly makes it easier for happy customers to leave feedback.
Booking and appointments. Put a code on business cards, shop windows or invoices that opens your booking page.
Product information. Link packaging or shelf labels to instructions, care guides, ingredient details or video demos.
Payments. Some payment providers offer QR codes for taking payment; use only codes generated by your provider and follow its security advice.
Wi-Fi access. A code can let guests join your guest Wi-Fi without typing the password. Use it only for a separate guest network.
Contact details. A code that saves your contact card (a vCard) to the customer's phone is handy on trade show stands and van signs.
Feedback and sign-ups. Link to a short survey or newsletter sign-up page, with a clear reason to scan.

Card with a printed QR code standing on a café table — Table cards work best when the code is large, high contrast and clearly labeled.

Hypothetical example

Imagine a bakery that puts a QR code on its paper bags with the words "Scan for this week's specials." The code points to example.com/specials, a simple page the owner updates every Monday. Because the code is static and the page lives on the bakery's own website, the bags printed this year will still work next year, and the owner can see visits to that page in her analytics.

Design and print tips

A code that does not scan is worse than no code. Follow these basics:

Size it for the distance. A code on a business card can be small; a code on a poster across a room needs to be much larger. As a rule of thumb, the further away people scan from, the bigger the code must be. Test from the real distance.
Keep strong contrast. Dark code on a light background works best. Avoid light codes on dark backgrounds, low-contrast brand colors and busy backgrounds.
Leave a quiet zone. Keep a clear margin of blank space around the code so phones can find its edges.
Keep the link short. Shorter URLs create simpler codes that scan more easily.
Add a call to action. Say what happens when people scan: "Scan to book," "Scan for the menu." Unlabeled codes get ignored.
Print the short URL too. Some customers will not or cannot scan. A readable web address next to the code gives them another route.
Test before printing in bulk. Scan a printed proof with several phones, including an older one, in the lighting where it will be used.

Common mistake

Linking a code to a page that is not mobile-friendly. Every QR code scan happens on a phone. If the destination is a tiny desktop page or a large PDF, people give up. Check the landing page on a phone before you print.

Security pitfalls and quishing

"Quishing" is QR code phishing: criminals use QR codes to send people to fake websites that steal payment details or passwords. A common trick is sticking a fake code over a genuine one on a parking meter, poster or table card. Because people cannot read a QR code by eye, they often scan without thinking.

You cannot stop criminals entirely, but you can make your codes harder to fake and easier for customers to trust:

Use your own domain. When the phone shows a preview of example.com, customers can see it is really you.
Check your codes regularly. Add a quick look at table cards, windows and posters to opening or closing routines. Look for stickers placed on top.
Use tamper-resistant placement. Codes printed directly on menus or laminated inside holders are harder to cover than loose stickers.
Never ask for sensitive data through a scanned page you do not control. If a code leads to payment, it should go to your trusted provider's checkout on a recognizable domain.
Tell customers what to expect. A short line such as "Our codes always open example.com" helps them spot fakes.

Good QR code habits

Codes point to your own domain
Clear call to action and a printed short URL
Regular checks for tampering

Risky habits

Dynamic codes on a service you might stop paying for
Unlabeled codes on loose stickers
Destinations that are not mobile-friendly

Your QR code checklist

Decide whether each code needs to be static or dynamic
Point codes to pages on your own domain where possible
Add campaign tags to links so your analytics can track scans
Check the destination page works well on a phone
Use dark-on-light colors with a clear margin around the code
Add a call to action and print the short URL as a backup
Test printed proofs with several phones at the real distance
Inspect displayed codes regularly for tampering
Keep a list of every code in use and where it points

Frequently asked questions

Do QR codes expire?

Static codes do not expire; they work as long as the destination page exists. Dynamic codes depend on the service that runs the redirect and can stop working if your subscription ends or the service closes. Read the terms before printing dynamic codes on long-lived materials.

Can I add my logo to a QR code?

Yes, many generators let you place a small logo in the center, relying on error correction. Keep the logo small, keep the contrast high and test carefully, because heavy branding can make codes harder to scan.

How do I track how many people scan my code?

Dynamic code services show scan counts. With static codes, add campaign tags to the link and check visits to that page in your website analytics. Using a dedicated page for each code also makes tracking simple.

Are free QR code generators safe to use?

Some free generators quietly create dynamic codes that redirect through their own service, and may later require payment to keep them working. Choose a generator that clearly creates static codes, check where the code points by scanning it, and keep a record of the destination.

The bottom line

QR codes are one of the cheapest ways to connect print and online, as long as you stay in control. Point codes to your own domain, choose static or dynamic codes deliberately, design for easy scanning and add a short URL as a backup. Check displayed codes regularly for tampering, and your customers will scan with confidence.