The Predatory QR Industry

How QR Code Companies Lock In Small Businesses

Menus, signage and packaging get printed once but scanned for years. How vendors turn that into lock-in — and how to escape.

QR vendor lock-in works because of a simple mismatch: you print a code once, but customers scan it for years — and the vendor controls what happens in between. That gap is how small businesses get quietly tied to a subscription they can't easily leave.

Lock-in isn't unique to QR codes; it's a familiar business strategy across software. But QR codes have a special ingredient that makes lock-in unusually sticky: the physical print run. Once your code is on menus, packaging, or signage, switching vendors means switching codes means reprinting everything. Let's look at exactly how that trap is built, why small businesses are especially exposed, and — most importantly — how to stay free of it. 🐾

The print-once, scan-for-years problem

Here's the mismatch at the heart of it. A restaurant prints its menu QR code one afternoon. That code then gets scanned thousands of times over the following years. The printing is a single, sunk, physical act. The scanning is a long, continuous stream. If the code is dynamic — routing through a vendor's redirect — then that vendor sits in the middle of every one of those future scans, for the entire life of the printed material.

Print is a one-time decision with years-long consequences. A dynamic code turns that permanence into ongoing leverage for whoever owns the redirect.

The vendor doesn't need to do anything dramatic. They just need to keep controlling the redirect while your printed codes keep pointing at it. Time and physics do the rest.

How the lock-in is constructed

Follow the sequence and you can see each bar of the cage slide into place:

  1. You make a "free" code that's actually a dynamic redirect through the vendor's domain. (See the dark side of free QR generators.)
  2. You print it at scale — the more copies, the deeper the commitment.
  3. The printed code now permanently encodes the vendor's short link. Only the vendor can change where it redirects.
  4. To switch vendors, you'd need a different code — which means reprinting every item.
  5. The cost of leaving now vastly exceeds the cost of staying, so you stay. That's lock-in.

The two costs that keep you stuck

Economists call these switching costs, and dynamic QR codes stack two big ones:

Switching costWhat it means for you
Reprint costNew design, prepress, print run, and physical replacement of everything in the field
Downtime costThe window where old codes are dead and new ones aren't out yet — customers can't reach you

Because both costs land on you and neither lands on the vendor, the balance of power tilts entirely their way after you print. That's what makes price increases, trial expirations, and new limits so effective — the mechanics we cover in what a dynamic QR code is really costing you.

Why small businesses are especially exposed

Lock-in hits small businesses hardest for a few reasons:

  • Print is a bigger relative cost. A reprint that a large chain absorbs easily can be a painful, deferred expense for a small shop — so the pressure to just keep paying is stronger.
  • Less time to read the fine print. A busy owner grabbing a "free" QR tool between other tasks is unlikely to notice they've been handed a dependency.
  • Materials are long-lived. Menus, window decals, and packaging stay in use for years, extending the vendor's grip.
  • Fewer alternatives on hand. Without an IT team, the self-hosted escape route (below) may not be obvious.

None of this requires the vendor to be villainous. The incentives simply reward keeping you in, as we explain in the subscription QR code business model.

How to stay free of lock-in

The whole trap depends on the vendor controlling the redirect. Take that control away and the lock-in evaporates. You have three solid options, from simplest to most flexible:

Option 1: use a static code

Encode your real destination directly. There's no redirect, no vendor, nothing to switch off — and nothing to lock you in. For any link that won't change (which is most links), this is the clean answer. You can create a free static QR code with no account and no expiry.

Option 2: point a static code at your own domain

Want to keep the option of changing the destination later? Make a static code that points to a short URL on a domain you own — say yourshop.com/go — and set up the forwarding yourself. You can change where it leads anytime, and because the code encodes your own domain, you never have to reprint to switch anything. The editability of dynamic, none of the lock-in.

Option 3: own the redirect infrastructure

If you need analytics too, run a simple redirect service on your own domain. You get scan data under your own privacy policy and full control of the target — and no third party can hold your printed materials hostage. This is the fuller version of the escape described in the case for static, open QR codes.

If you're already locked in

Don't panic — you have moves:

  • Weigh the numbers. Compare the ongoing fee against a one-time reprint with a static or self-hosted code. Often the reprint pays for itself quickly.
  • Migrate at the next print cycle. When you'd reprint anyway — a menu update, new packaging — switch to a code you own so you never re-enter the trap.
  • Prefer your own domain going forward. Even one owned-domain code breaks the dependency for that material permanently.

The principle to carry forward

Lock-in isn't magic; it's just control of the redirect plus the permanence of print. Keep the redirect in your own hands — or skip it entirely with a static code — and no QR vendor can ever tie you down. Decode every code before it goes to print, confirm it points to something you own, and you'll stay free. That principle is exactly why QR Puppy makes only static codes, as our manifesto lays out. For more on how these codes fail when a vendor pulls the plug, see why printed QR codes stop working.

Frequently asked questions

What exactly is QR vendor lock-in?

It's when your printed QR codes depend on a vendor's redirect, so leaving that vendor would require reprinting everything. The vendor controls what happens between the scan and your page, and the cost of switching keeps you paying.

How do I escape lock-in without reprinting?

If your dynamic code's destination is still under your control, you may be able to keep it running while you plan a migration. The clean fix, though, usually comes at your next print cycle: switch to a static code or one that points to your own domain, so you never depend on a vendor again.

Can I have editable codes without lock-in?

Yes. Point a static code at a short link on a domain you own and manage the forwarding yourself. You can change the destination anytime without reprinting, and no third party can switch it off, because the code encodes your domain, not theirs.

Why are small businesses hit hardest?

Reprinting is a bigger relative cost for a small business, their materials tend to stay in use for years, and a busy owner is less likely to notice the dependency when grabbing a "free" tool. All of that deepens the vendor's grip.

Is it wrong for vendors to design for lock-in?

It's not necessarily illegal, and dynamic codes are a legitimate product. The concern is fairness: when the dependency isn't disclosed and the free static option is hidden, customers get tied down without understanding the trade. Choosing a code you own keeps the power in your hands.

Make a QR code the honest way 🐾

Free forever, no tracking, no expiry — generated right in your browser.

🎨 Create a QR code →