QR Codes for Small Businesses: What Works and What Does Not

QR codes had a first life as a punchline and a second life as infrastructure. The thing that changed was not the technology — the specification has been stable since the 1990s — but that phone cameras started recognising them natively, removing the app that killed the first attempt.

They are now genuinely useful, in one specific circumstance: when typing would be awkward and a tap is not available. Every good use case is an instance of that. Every bad one ignores it.

The uses that work#

A menu, price list or specification on a table or shelf#

The original pandemic-era use case, and it survived because it is sound. Someone is holding a phone, standing in front of a physical object, and needs information that changes too often to reprint.

Do it well: keep the actual menu on a page you control rather than a PDF, because a PDF on a phone is a pinch-and-zoom experience nobody enjoys. And keep a paper version available — some customers will not scan, and a few cannot.

A review link on a receipt or invoice#

Asking for a review works far better in the thirty seconds after good service than in an email three days later. A code on the receipt or the invoice removes the "find the review page" step, which is where most people give up.

Point it at the direct review-writing URL, not at your profile page.

Wi-Fi access for guests#

A code that joins the network removes the worst customer interaction in hospitality — reading out a 20-character password across a counter.

The security caveat is real. Anyone who scans the code, or photographs it and decodes it later, has the password. Put a guest network on it, isolated from anything your business actually runs on. The NCSC's guidance on QR codes is worth reading if you are putting one in a public space.

Contact details on a card or vehicle#

A vCard code adds a name, number, email and website to a phone's contacts in one tap. Meaningfully better than someone typing your number in from a business card, which they will not do.

On a vehicle, a code pointing at a quote form works — but size it for the distance. A code on a van door read from two metres away needs to be roughly 20 cm across.

Booking and enquiry forms in a window#

A shop window after closing time is a good place for a QR code. The person is standing outside a closed business with their phone in their hand, and the alternative is that they walk away.

Payment links on an invoice#

For small-value B2C work — a tradesperson invoicing a homeowner — a payment code shortens the distance between receiving the bill and paying it. Less useful for B2B, where a finance team pays by transfer regardless.

Product information and instructions#

Packaging has limited space and manuals get lost. A code linking to setup instructions, care information, ingredient details or a video is a genuine improvement over a folded leaflet, and it can be updated after the product ships.

Campaign tracking#

Because a static code cannot count scans itself, encode a URL with campaign parameters instead:

https://example.com/offer?utm_source=window-card&utm_medium=qr&utm_campaign=spring

Your own analytics then tells you which physical placement worked, without depending on a third-party redirect service.

The uses that do not work#

A QR code on a website. The visitor is already on a device with a cursor or a finger. Give them a link.

A QR code in an email. They are reading the email on the phone you want them to scan with. This is a genuinely common mistake.

A code on a billboard by a road. Nobody is scanning at 60 mph, and the ones who try should not be.

A code with no explanation. "Scan me" is not a reason. Say what happens: "Scan for today's specials", "Scan to book a table".

A code pointing at your homepage. The person scanned for something specific. Landing them on a general homepage means they have to navigate to what they wanted, on a phone, standing up. Point it at the exact page.

A code that requires an app install. The whole advantage is that no app is needed. Sending someone to an app store undoes it.

Static or dynamic: the decision that will bite you later#

Static codes encode the destination directly. The pattern is the URL. They cannot be changed, cannot be tracked, and cannot stop working.

Dynamic codes encode a short URL belonging to a service. That service forwards the visitor and counts the scan. They can be edited after printing and they report analytics.

The convenience of dynamic codes is real. So is the dependency. Every sticker, menu, business card and window decal you printed now depends on a third party continuing to exist, continuing to honour whatever plan you signed up for, and continuing to resolve that redirect. Services have shut down. Free tiers have become paid tiers. Codes printed on thousands of items have gone dead.

A reasonable rule:

• Anything printed at volume or intended to last — packaging, signage, vehicle livery, business cards — should be static, pointing at a URL on a domain you own. If you need to change the destination later, change what that URL redirects to on your own server. You get editability without the dependency.
• Short campaigns where per-scan analytics genuinely drive a decision can use dynamic codes, accepting the dependency for a defined period.

Our QR code generator produces static codes deliberately, for this reason.

Making a code that actually scans#

Keep it dark on light. Scanners look for a dark pattern on a light field. Inverting works on some phones and fails on others, and you will not be there to explain.

Keep real contrast. Pale grey on cream looks tasteful on screen and is unreadable on paper. Aim for a strong difference in lightness, not just in hue.

Leave the quiet zone. The blank margin is part of the ISO specification, not decoration. Two modules is the practical minimum; four is safer on a busy design. Placing a code flush against a photograph or a coloured band is the most common design-led failure.

Size for the distance. Roughly one tenth of the scanning distance:

Shorten the URL first. Fewer characters means fewer modules, which means a code that stays readable when printed small. example.com/menu produces a far simpler pattern than a URL with three levels of path and a query string.

Choose the right error correction. Level M (15% recoverable) is right for screens and clean printing. Move to Q or H for packaging, stickers, anything curved or likely to get scuffed. Higher levels make the pattern denser, so print them larger.

Avoid glossy laminate where you can. Glare defeats a camera more often than any of the above.

Test properly. Print one. Scan it with an iPhone and an Android device, in the lighting where it will actually live, from the distance people will actually stand. Do this before you order a thousand copies. This step is skipped constantly and is the cheapest insurance available.

A note on trust#

Because a QR code is unreadable to humans, it asks people to follow a link they cannot inspect. That is a legitimate security concern, and criminals have exploited it — placing fraudulent codes over genuine ones on parking meters and payment terminals is now a recognised scam pattern.

Two consequences for a legitimate business:

Check your codes physically. If you have codes in a public place, look at them periodically. A sticker placed over yours is easy to miss and expensive to discover late.

Give people a reason to trust it. Print the destination domain next to the code in plain text. It costs a line and lets someone confirm where they are going before they scan — and if they prefer, type it instead.

---

Our free QR code generator makes static codes for links, email, phone, SMS and Wi-Fi, with custom colours and a vector SVG download for print. It runs in your browser, so nothing you encode — including a Wi-Fi password — is transmitted anywhere.

Related: how to create a professional invoice, if you are adding a payment code to your billing.