The sticker on top
Someone prints a QR in your style and sticks it over your poster, your table or your parking meter. The customer scans trusting you, and ends up paying or leaving data on a site that isn't yours.
A sticker over your code and your customers end up on a site that isn't yours: that's "quishing", phishing through QR codes. With a signed QR, every code carries your brand's cryptographic signature, and anyone can check who issued it before opening the link. Nothing to install.
● Included with Studio and above● Verification in the browser, no app● The code never expires
A QR doesn't say who made it. That is exactly the weakness scammers exploit.
Someone prints a QR in your style and sticks it over your poster, your table or your parking meter. The customer scans trusting you, and ends up paying or leaving data on a site that isn't yours.
Fake invoices, fake fines, fake posters: your logo and a QR are cheap to forge. When the scam breaks, the trust that gets burned is your brand's.
The more quishing cases make the news, the more people hesitate before scanning. Your physical-world channel loses value if nobody can tell your code from an imitation.
Each signed link carries a signature that only your key can generate. Whoever verifies knows you issued the code, not an imitator.
A public web verifier: camera, browser and an instant answer. "This code was signed by this brand" before the link opens.
With per-item serialized codes, if the same code shows up more often or in places where it shouldn't, it is logged and we alert you so you can review it.
The printed QR is your direct channel: the code is permanent, you edit the destination whenever you want, and the scan analytics are yours. The signature adds identity.
Honesty first: a signed QR proves who issued the code and, if it is serialized, whether it had been seen before. It does not prove that the physical object it is printed on is the original. And a repeated rescan can have perfectly legitimate explanations: we show it as a signal to review, never as an accusation.
Keys are generated in your browser; the private key never leaves your device. The public key is published so anyone can verify.
Every code in the campaign carries your brand's signature. You design it, print it and use it like any other Qmarque QR.
The public verifier is enough: the check happens in the browser of whoever scans, with nothing to install.
You're half right: the image can be copied. What can't be copied is everything else.
By design: a QR is an open graphic and anyone can reproduce it. No honest provider will tell you otherwise.
Signing as you requires your private key, which never leaves your browser. A copied code without a valid signature gives itself away in the verifier.
The printed code is permanent, but where it points is yours to decide, always: own resolver, anti-hostage guarantee and analytics, protected by tests in our code.
It proves who issued the code (your brand) and, for serialized codes, whether that code had been seen before. It does not prove that the physical object it is printed on is the original.
The image can always be copied. What cannot be copied is your brand's signature (the private key never leaves your browser) or control of the destination, which stays yours. And if a serialized code is copied, the anomalous rescan is logged and we alert you so you can review it.
No. There is a public web verifier: it opens in the browser, you point the camera at the code, and the check happens on the same device.
The Studio, Agency and Enterprise plans. You turn it on from your dashboard, at no extra cost.
See how this type of code fits your industry.
Sign your codes, give your customers a way to check them and keep control of the destination. No extra cost within your plan.