QR codes that can’t be held hostage.

Most often, the code was never really yours. Many online generators create a “dynamic” code: the printed pattern holds a short address on the generator’s own server, and that server forwards each scan to your website.

When a free trial ends, a plan is cancelled or a card payment fails, the generator can switch that forwarding off. Every flyer, menu and sign you printed then opens an error or an upgrade page, even though the pattern itself is undamaged.

A static code works differently: your web address or text is stored inside the pattern, so the code keeps working for as long as the destination exists. Every code made on this page is static.

The pattern is familiar: you design a code for free, the download asks for an account, and the code you receive is dynamic by default. A trial of a week or two starts quietly in the background.

Once the trial ends, the code stops forwarding scans until you choose a paid plan. Some plans are billed a year in advance, and the notice often arrives after the codes are already printed.

Before you download from any generator, look for the words “trial”, “dynamic” or “deactivate” in its pricing and terms.

Scan the downloaded code with your phone camera and read the address in the preview before you open it.

If it shows your own website, the code is static and cannot be switched off by the generator. If it shows the generator’s domain or an unfamiliar short link, the code depends on that company’s server and its billing.

A QR reader app gives the same answer: a static code reveals your full content, while a dynamic code reveals only a redirect address.

You cannot change what a printed pattern contains. Your options are to pay to reactivate the redirect, or to print new codes and cover the old ones with stickers.

If you reprint, make static codes that hold your own address, or use a short link whose expiry you can see before you create it. Export SVG so the replacement stays sharp on large signs.

Keep a copy of the vendor’s terms and note the date the code stopped working. If you were charged for a plan you did not agree to, your bank or card issuer may be able to help.

No. A redirect is genuinely useful when you need to change a destination after printing, or to count scans for a campaign.

The problem is how they are often sold: dynamic codes switched on by default, expiry dates hidden until after download, and reactivation fees for codes that people printed in good faith.

A fair short link tells you how long it will work before you create it and lets you pause or delete it yourself. That is how g8.hk short links on refi.ne work.

Some free generators insert an advertising page between the scan and your website, or send expired codes to their own sales page.

If a redirect domain is later sold or abandoned, scans can land somewhere you never chose. A static code has no middle step, so it always opens exactly what you entered.

It depends on where the code is made. Some generators send what you type to their servers to build and store the code.

This generator draws the code in your browser. Your Wi-Fi password, contact details and text stay on your device and are not uploaded.

Quishing is phishing with a QR code. Scammers stick their own codes over real ones on parking meters, posters and restaurant tables, or send them by email, to lead people to fake payment or login pages.

Before you open a scanned link, check that the address in the preview belongs to the business you expect. Be careful with any code that asks for card details or a password straight away.

If you print codes for customers, write your web address below each one and check public codes regularly for stickers placed on top.