Business 2026-02-25 5 min By Cornelious Fazal

QR Code for Product Authentication: How to Verify Genuine Products and Protect Your Brand

Quick Answer

QR codes on packaging can prove product authenticity, but not all implementations are equally secure. This guide explains how product authentication QR codes.

Can a QR Code Prove a Product Is Genuine?

A QR code on product packaging can contribute to authenticity verification - but the security it provides depends entirely on how it is implemented. A basic QR code linking to the brand's website proves nothing: a counterfeiter can print the same code on a fake product just as easily. Well-implemented QR authentication, however, can make counterfeiting significantly harder and detectable.

Understanding the tiers of QR code authentication helps you choose the right approach for your product's risk level and budget.

The Authentication Tiers

Tier 1: URL-based Authentication (Basic - Easily Copied)

The simplest implementation: each unit carries a QR code linking to a product landing page. When scanned, the consumer sees the brand page confirming the product. Problem: any counterfeiter can scan the legitimate code, clone the URL, and print the same code on fake products. The consumer scanning a fake product sees exactly the same verification page as they would on a genuine product.

Appropriate for: brand engagement, product information, and marketing - not for genuine anti-counterfeiting applications.

Tier 2: Serialised QR Codes (Moderate Security)

Each unit receives a unique QR code encoding a unique serial number (not the same code for every unit). When scanned, the serial number is checked against a secure server that tracks:

  • Whether the serial number exists (fake products generate codes with invalid numbers)
  • How many times this serial number has been scanned (if the same code is scanned in New York and London within the same hour, that is a flag for cloning)
  • Where the product should be in the supply chain (if a code registered for Europe is scanned in North America before the distribution date, that is a flag)

The database check requires server infrastructure. This is beyond DIY implementation - dedicated brand protection platforms (Authentix, Scribos, Systech, Track & Trace systems) provide this as a service. Pricing is volume-based.

Tier 3: Tamper-Evident Label Integration

The QR code is applied on a label that destroys itself - or reveals a void pattern - when removed or tampered with. A product with the label still intact and scanning correctly is both authentic and unsealed. If the label has been visibly tampered with, the product and code may still be genuine, but the seal has been broken.

Combine with serialised QR codes for both authenticity and tamper-evidence simultaneously. Tamper-evident label suppliers include Scribos, CCL Security Products, and specialist label printers.

Tier 4: NFC Chip Authentication (Maximum Security)

For the highest-value goods (luxury fashion, spirits, pharmaceuticals), NFC chips with cryptographic authentication (NTAG 424 DNA standard) provide the strongest consumer-facing verification. The chip contains a unique cryptographic key; the authentication server verifies it was generated by a genuine chip, not cloned. A cloned NFC chip cannot reproduce the cryptographic signature.

This is the standard increasingly used in high-end spirits (Remy Martin, Hennessy), luxury accessories, and pharmaceutical supply chains. Cost per unit is higher than a printed QR code; the unit economics only work for premium products.

For Small Brands and Artisans: Practical Approaches

For small-scale product makers with a niche audience, the risk of sophisticated counterfeiting is lower. Practical steps that add meaningful value:

  1. Batch-specific QR codes: Different QR codes for each production batch (not each individual item), linking to a page that shows the batch number, production date, and ingredients/provenance story. Consumers who care about provenance value this; counterfeiters selling at scale would need to recreate batch-specific codes.
  2. Owner registration via QR: A QR code on the product links to a registration page where buyers register their purchase. This builds a customer database and provides a natural alert if a product with an already-registered code is registered again in a different location.
  3. Authenticity certificate page: Link to a page specific enough to your product that a generic counterfeit could not easily match it - batch photos, the individual maker's signature, or a custom story.

Frequently Asked Questions

With a basic URL QR code, no - a consumer scanning a cloned QR code on a counterfeit product sees exactly the same page as scanning a genuine product's code. With a serialised QR code system backed by a live database, the system detects anomalies (duplicate scans, wrong geography, invalid serial numbers) and can display a warning. The consumer experience of serialised codes: on genuine products, they see a "Verified Genuine" confirmation with product details; on fake products or cloned codes, they may see an error or warning. The distinction is only reliable with the serialised database approach, not with static URL codes.

Generating serialised QR codes (one unique code per unit) is technically straightforward - a spreadsheet with unique serial numbers, each converted to a URL, each converted to to a QR code using batch generation tools. The harder part is the verification server: when the code is scanned, the server must check the serial number and track scan history. This requires either building a custom web application or using a brand protection platform. Free DIY serialisation without a verification server provides limited security - serial numbers that are never checked can be copied as easily as any other code.

The highest-concern industries for product counterfeiting are: luxury goods (handbags, watches, apparel), spirits and alcohol (fake spirits cause poisoning deaths annually), pharmaceuticals (fake drugs are a global public health crisis), cosmetics and personal care, electronics and accessories, and food safety (premium food products misrepresented as to origin or ingredients). Authentication QR codes are most commonly implemented in spirits, pharmaceuticals, and high-end consumer goods. GS1's Sunrise 2027 2D barcode transition will also drive authentication capabilities into mainstream grocery and consumer goods supply chains.

A QR code can link to a Certificate of Analysis (COA), lab test report, or regulatory certification document for a specific production batch. This is standard practice in the cannabis/CBD industry, specialist supplements, and premium food products. The QR code does not itself verify safety - it links to the documentation. For the documentation to be credible, it must come from a recognised third-party testing laboratory and include the batch number that matches the product, so the link between code and certificate is specific to that batch rather than generic.
Back to Knowledge Hub