How to Tell If a QR Generator Is Predatory
Red flags that a QR code generator will hold your code hostage — and green flags for tools that give you a code you truly own.
You can usually tell within about sixty seconds whether a QR code generator is on your side or setting a trap. Here's a practical checklist of red flags and green flags, so you never print a code that someone else can quietly switch off.
Not every QR tool is predatory — many are perfectly honest, and even dynamic codes have legitimate uses. But some generators are engineered to funnel you into a code you don't truly own, then charge to keep it alive. The good news is that the warning signs are consistent and easy to spot once you know them. Run any tool through this checklist before you commit ink to paper. 🐾
The one test that matters most
Before the detailed checklist, here's the single question that cuts through everything: after I download this code, who can turn it off? If the answer is anyone but you, the tool has handed you a dependency. Everything below is really just different ways of answering that question quickly.
The practical version of the test: decode the finished code with any scanner and read the link. If it points straight to your real destination, it's a static code you own. If it points to a short link on the vendor's domain that then redirects, someone else is in the middle. Our explainer on static vs dynamic QR codes covers why that distinction is everything.
Red flags: signs a generator may be predatory
1. It forces you to sign up before downloading
A static QR code is just an image your browser can produce instantly. If a tool won't let you download without creating an account, ask why it needs to capture you first. Often it's because the "code" is really a dynamic redirect tied to that account.
2. It says your code will "expire"
QR codes cannot expire — the pattern is just data. Any "your code expires in X days" message means the tool gave you a dynamic redirect it plans to switch off unless you pay. This is the classic pressure tactic we describe in the dark side of free QR generators.
3. It imposes scan limits
"Up to 500 scans on the free plan" is a tell. A static code has no scan counter because no server is involved. A scan cap only exists because the vendor is metering a redirect they control — and will throttle when you get popular.
4. There's no static or plain-image export
If you can't get a straightforward PNG or SVG that encodes your actual link — only a "managed" code — the tool is keeping you dependent by design. A trustworthy generator lets you walk away with a real file.
5. Static is hidden, dynamic is the default
Some tools bury the static option, pre-select dynamic, or don't mention the difference at all. Defaulting you onto the billable path without explanation is a red flag even if everything else looks polished.
6. It's vague about how it makes money
If a tool is "free" but won't explain why, be cautious. Honest free tools can tell you exactly how they sustain themselves. Silence usually means you are the product — via your data or a subscription you'll be nudged into. See the subscription QR code business model for the incentives at play.
Green flags: signs a generator respects you
- Instant download, no account. You get a plain image without handing over your email.
- The code encodes your real link. Decode it and you see your own URL, not a vendor domain.
- Static vs dynamic is clearly labeled. You're told which you're getting and what the trade-offs are.
- No expiry, no scan limits. Nothing suggests the code can be switched off or throttled.
- Standard formats. PNG and SVG exports you can use anywhere, forever.
- Honest about the business. The tool explains how it stays free or what you're paying for.
- Open about privacy. No silent tracking baked into the code itself.
The at-a-glance checklist
| Question | Good answer | Warning answer |
|---|---|---|
| Can I download without an account? | Yes | No, signup required |
| Does the code encode my real link? | Yes | No, it's a vendor redirect |
| Any mention of "expiry"? | None | "Expires in X days" |
| Any scan limits? | None | Capped per plan |
| Plain PNG/SVG export? | Yes | Managed code only |
| Is static clearly offered? | Yes, prominently | Hidden or absent |
| Clear how it makes money? | Yes | Vague |
If most of your answers land in the left column, you've found an honest tool. A cluster in the right column means proceed with caution — especially before printing anything at scale.
"Predatory" doesn't always mean dynamic
To be fair: a tool offering dynamic codes isn't automatically predatory. A generator that clearly presents both options, explains the dependency, and prices dynamic fairly is doing honest work — dynamic codes are a legitimate product for people who genuinely need editable destinations. The predatory pattern is specifically about deception: hiding the free static path, manufacturing expiry pressure, or making a plain code impossible to obtain. Judge the honesty, not just the feature set.
What to do once you've spotted the flags
If a tool trips several red flags, don't print its code. Instead:
- Find a generator that gives you a genuine static code as a downloadable image.
- Decode the result and confirm it points to your real destination.
- If you truly need an editable target, self-host the redirect on your own domain so no vendor can hold it over you — the escape route in how QR companies lock in small businesses.
QR Puppy was built to pass every item on this checklist: a plain static code encoding your real link, downloadable with no account, no expiry, no scan limits, and no tracking. You can create a free static QR code right now, and read the manifesto to see why we hold ourselves to these standards on purpose.
Frequently asked questions
What's the fastest way to check if a generator is trustworthy?
Download the code and decode it with any scanner. If it points straight to your real link, you own it. If it points to a short URL on the vendor's domain that then redirects, someone else controls it and could switch it off.
Is a tool that requires signup automatically bad?
Not automatically, but it's a yellow flag. A static code is just an image that needs no account to produce, so mandatory signup often means the tool is tying your code to a managed, billable redirect. Prefer tools that let you download a plain image freely.
Are dynamic-code generators always predatory?
No. Dynamic codes are legitimate, and a vendor that clearly offers both static and dynamic, explains the dependency, and prices fairly is being honest. The predatory pattern is deception — hiding the static option, faking expiry pressure, or refusing to give you a plain code.
What does it mean if a code has a "scan limit"?
It means the code is dynamic and the vendor is metering the redirect. Static codes have no scan counter because no server is involved. A scan cap is a sign your code can be throttled or blocked once it gets popular.
Can I trust a "free" QR tool at all?
Yes, when it's transparent. Honest free tools explain how they sustain themselves, give you a downloadable static image, and don't threaten expiry or limits. Free can genuinely mean free — a static code costs nothing to maintain.
Make a QR code the honest way 🐾
Free forever, no tracking, no expiry — generated right in your browser.