Quick answer: Most ecommerce merchants use static QR codes with no tracking and no mobile-optimized landing page. Switch to dynamic QR codes, add UTM parameters, and make sure the destination page loads fast on mobile. That combination is what turns scans into sales.
Most merchants print a QR code, stick it on packaging or a flyer, and move on. Nobody checks if it still works six months later. Nobody looks at whether the page it links to loads properly on a phone. Nobody tracks whether any of those scans turned into actual sales.
That is the real QR code problem in 2026. Not "how do I create one," but "why am I not getting results from the ones I already have."
Here is what is actually going wrong, and how to fix it.
Static vs. Dynamic QR Codes: Which Should You Use?
A static QR code encodes a URL directly into the code itself. Once you print it, it is permanent. If the URL changes (a product page gets deleted, a campaign ends, you move to a new platform), the code points to a dead link. Forever.
A dynamic QR code points to a redirect URL you control. The printed code never changes, but you can update where it sends people at any time. You can also see scan data: how many people scanned it, where, on what device, and at what time.
Dynamic QR codes now hold 65% of the QR market and are growing at nearly 20% per year. Brands using dynamic codes see three to four times higher repeat engagement, according to a 2025 G2 report. The reason is simple: static codes work once. Dynamic codes work indefinitely, and they give you data.
If you are printing QR codes on packaging, receipts, flyers, or product inserts: use dynamic codes. Static codes are only appropriate for one-off uses where you will never need to update the destination.
Where to Put QR Codes (And What to Link to)
Customers already scan. 64% of shoppers have scanned a QR code in a physical store, and 61% have scanned one after making a purchase. The opportunity is there. The question is whether you are using it.
Here are five placements that work for ecommerce merchants:
1. Product packaging to video or detailed product page. A short "how to use" video linked from the packaging reduces returns and support requests. 79% of consumers say they are more likely to buy a product that links to additional product information via QR code.
2. Receipts and packing slips to a review request. Right after a purchase is the best time to ask for a review. Link to your Google, Trustpilot, or product review page. Keep the destination page simple: one action only.
3. Out-of-stock shelf displays to similar products or a back-in-stock signup. When a product is sold out, a QR code on the shelf display can send shoppers to an alternative product or an SMS waitlist. That is a sale you would have lost otherwise.
4. Flyers and print ads to a targeted landing page. Do not send flyer traffic to your homepage. Build a short landing page specific to that campaign. Add UTM parameters to the URL so you can see exactly how much revenue came from that print run (more on this below).
5. Post-purchase inserts to a loyalty signup or easy reorder. A card inside the package with a QR code linking to a loyalty program or a reorder page turns one-time buyers into repeat customers.
How to Track QR Scans and Tie Them to Revenue
Only 1 in 8 marketers can actually connect a QR scan to a sale. That gap is fixable, and it does not require expensive software.
The standard approach is UTM parameters: short tags you add to the destination URL before creating the QR code.
A URL with UTM tags looks like this:
https://yourstore.com/products/product-name?utm_source=packaging&utm_medium=qr_code&utm_campaign=summer2026
When a customer scans the code and visits that URL, Google Analytics 4 records the source, medium, and campaign automatically. You can then filter your GA4 traffic reports by utm_medium = qr_code to see how many sessions, purchases, and revenue came from each printed QR code.
Use a unique UTM tag for each placement. One tag for your packaging, a different one for your flyers, another for your receipt inserts. That way you know exactly which physical touchpoint is driving sales.
If you use a dynamic QR code platform, most of them also provide built-in scan counts by date, location, and device type. Combine that with your GA4 data for a complete picture.
The Security Problem: What Is Quishing?
QR code phishing (called "quishing") rose 587% in 2024 and now accounts for 20% of online scams. Criminals print fake QR code stickers and place them over legitimate codes in stores, on parking meters, and on restaurant menus.
Your customers may hesitate to scan your codes because of this. Two steps protect both them and your brand:
Print the destination URL below the code. Most phones show a preview of the URL before opening it. If your branded domain is visible under the code, customers can verify it is safe before they tap.
Use tamper-evident stickers for any QR codes displayed in physical locations. If someone places a fake sticker over yours, it will be obvious. Check your in-store codes regularly.
This is not just a security measure. It is a trust signal. Branded QR codes with a visible domain get scanned more than unbranded ones.
Why Your QR Codes Are Not Converting
Getting someone to scan is only half the job. The page they land on is where most conversions fail.
Most QR traffic goes to phones. If your landing page is slow, hard to read on a small screen, or asks visitors to do too many things at once, they leave. Mobile visitors abandon a page if it takes more than three seconds to load.
Before you print another QR code anywhere, scan it yourself on your phone and ask three questions:
- Does this page load in under three seconds?
- Is it obvious what I should do next?
- Is there one clear action, with no distractions?
If the answer to any of those is no, fix the page first. Printing more codes into a broken experience just wastes your budget.
What to Do This Week
- Audit your existing QR codes. Scan each one. Does it still work? Does the destination page load on mobile? Is it still the right page?
- Switch to dynamic codes for everything you print next. Most dynamic QR platforms offer free tiers with basic scan tracking.
- Add UTM parameters to every QR destination URL. Set up GA4 to track sessions and conversions from
utm_medium = qr_code. - Print the URL below every QR code. It builds trust and gives customers a way to verify the code is safe.
- Test the landing page on your phone before you print. Fix anything that loads slowly or feels cluttered.
The merchants who get the most from QR codes in 2026 are not the ones who use the most codes. They are the ones who track what happens after the scan, and fix what is not working.