Can I Limit How Many Times a QR Code Can Be Scanned?
You can limit QR code scans with a dynamic code's scan cap, but it counts scans, not people. For true one-time use, give each person a unique code.
Nookesh Karri · 7 min read 
Yes, you can limit QR code scans, but only with a dynamic QR code. A dynamic code sends every scan through a redirect server, and many generators let you set a maximum number of scans, after which the link stops working. A cap counts scans, not people, so for real one-time use, such as tickets or vouchers, you need a unique code for each person.
How you limit QR code scans on a dynamic code
You limit scans by setting a cap on a dynamic code, because only a dynamic code passes through a server that can count. Scandit’s QR code guide explains that a dynamic code holds a short URL that resolves to a redirect service, which is how each scan gets recorded. A static code holds the final link in the printed pattern, so there’s nothing to count.
The setup looks much the same in every tool that offers it:
- Create a dynamic code, or open one you already made.
- Find the expiry or scan limit setting.
- Choose “number of scans” and enter the maximum.
- Pick what people see once the limit is reached, if the tool lets you.
- Scan the code yourself a few times to confirm it counts and stops as expected.
As of November 2026, QR TIGER’s help center lists three expiry options: by date, by number of scans, or by IP address. It also says the feature needs an Advanced plan or higher, so check the plan before you design a campaign around it.
Three kinds of limit, and what each one actually stops
A total scan cap, a per-device limit and a unique code per person solve different problems.
| Limit type | How it works | Good for | What it can’t stop |
|---|---|---|---|
| Total scan cap | The shared code stops after N scans | ”First 100” giveaways, small promos | One person scanning many times, screenshots shared in group chats |
| Per-IP limit | Each IP address gets one scan, or a few | Discouraging repeat entries | People on the same Wi-Fi sharing an IP, someone switching to mobile data |
| Unique code per person | Each person gets their own code, and a server marks it used | Tickets, vouchers, one-time downloads | Very little, if the check happens at the door or till |
The total scan cap
A total cap turns the code off after a set number of scans, whoever does the scanning. ElkQR’s scan limits page uses a “first 100 customers” flyer as its example: scan #100 gets the discount and scan #101 sees “Sorry, this offer has ended.”
That example shows the catch. If one curious customer scans the flyer three times, three of your 100 are gone. The cap counts requests, and it can’t promise that 100 different people got the deal.
Limiting scans per device or IP
A per-IP limit restricts how often each internet address can scan, which roughly means each device or network. QR TIGER’s IP option lets you allow an address to scan once or several times.
It’s a filter, not an identity check. A whole office or café shares one public IP, so the first person in the building can use up everyone else’s turn. The same person can also switch from Wi-Fi to mobile data and scan again.
A unique code for each person
A unique code per person is the reliable way to make something truly single-use. Each guest or customer gets their own code, and a server checks it when it’s presented.
Coupon Carrier’s comparison of validation methods describes the usual three steps: confirm the code is real, check whether it has been used, then mark it redeemed. A repeat scan shows “Already redeemed.” A Bubble e-ticketing tutorial builds the same idea with a unique 12-character ticket code and a status field of valid, used or cancelled.
The difference is who does the scanning. With a scan cap, the customer scans. With a unique code, staff scan the customer’s code at the door or till, so screenshots and forwarding don’t help anyone get in twice. Our guide to QR codes for event check-in covers that setup in more detail.
What happens when the scan limit is reached
What people see after the cap depends on the tool. ElkQR, for instance, offers either a default “This content is no longer available” message or a redirect to any URL you choose, such as a waitlist or your regular pricing page.
Pick the redirect whenever you can. Whoever made scan #101 still wanted your offer, so send them somewhere useful. The same thinking applies to codes that end on a date, which we cover in how to make a QR code expire.
QR TIGER’s help center notes that its scan limit is cumulative. A code set to expire after 1,000 scans needs the limit raised to 2,000 to allow another 1,000, not reset to 1,000.
Why scan counts run higher than people
Scan counts run higher than the number of real people for two reasons: repeat scans and automated checks. Repeat scans are the obvious one: a person scans a poster, closes the page, and scans again later.
The second matters if the code’s short link also gets shared as a link. Microsoft’s Safe Links documentation says Microsoft Defender for Office 365 scans URLs in email before delivery and checks them again when someone clicks. Put the same short link in an email and those checks can hit it before any human does. On a code capped at a small number, a couple of automated requests can eat the limit.
To see the gap between visits and people in your own data, our post on unique scans vs total scans explains how analytics tools count each.
Two meanings of “scan limit”
“Scan limit” also gets used for the opposite problem: a vendor capping how many scans your plan allows. On some free plans, that cap can stop codes that are already printed.
QRAnalytica includes unlimited scans on every plan, so the plan itself never switches off a printed code. Any scan cap has one limitation: it lives on a shared link, so it can count and stop scans but can’t tell who scanned. For hard per-person limits, use unique codes checked by your ticketing or voucher system, and scan tracking to measure the campaign around them.
My take: cap the offer, not the code
Use a scan cap only when “roughly the first N” is good enough, like a free-sample giveaway. If money, entry or stock depends on the limit, give each person their own code and have staff scan it. A counter on a shared flyer code can’t tell people apart.
FAQ
Can I make a QR code that only works once?
Some dynamic generators let you set the scan limit to one, so the link stops after the first scan. For tickets or vouchers, a unique code per person that a server marks as used is more reliable.
Can a static QR code have a scan limit?
No. A static code holds the link in the printed pattern and doesn’t pass through any server, so nothing can count or stop the scans.
What happens when a QR code reaches its scan limit?
It depends on the tool. Some show a short “no longer available” message, and others let you redirect later scans to a page you choose, such as a waitlist.
Can I limit scans per person instead of in total?
Some tools limit scans by IP address, which roughly means per device or network. People on the same Wi-Fi can share an IP, so treat it as a rough filter, not an identity check.
Sources
- QR Code symbology guide (Scandit)
- How do I make a QR code stop working after a certain time or number of scans? (QR TIGER help)
- Scan Limits (ElkQR docs)
- Mark as Used vs QR code scanning (Coupon Carrier)
- How to build e-ticketing in Bubble (RapidDev)
- Safe Links in Microsoft Defender for Office 365 (Microsoft Learn)