QR Code Statistics 2026: Usage, Retail, Mobile and Security Trends

Key QR code statistics for 2026

These are the headline numbers worth knowing before designing a QR campaign. They are not all direct scan counts, because the most trustworthy public sources often measure the conditions that make QR scanning work: smartphone access, mobile internet use, retail 2D barcode migration, consumer interest in product information, and QR-based security abuse.

• 91% of U.S. adults owned a smartphone in Pew Research Center data collected through June 18, 2025: [Pew mobile fact sheet](https://www.pewresearch.org/internet/fact-sheet/mobile/).
• 4.7 billion people, or 58% of the world population, used mobile internet by the end of 2024 according to GSMA: [The Mobile Economy 2025](https://www.gsma.com/solutions-and-impact/connectivity-for-good/mobile-economy/wp-content/uploads/2026/01/The-Mobile-Economy-2025.pdf).
• 79% of consumers in a 2025 GS1 US consumer survey were more likely to buy products with a scannable smartphone QR code that provides additional product information: [GS1 US Sunrise 2027](https://www.gs1us.org/industries-and-insights/by-topic/sunrise-2027).
• Microsoft observed QR code phishing volumes rise from 7.6 million in January 2026 to 18.7 million in March 2026, a 146% increase over Q1: [Microsoft Security Blog](https://www.microsoft.com/en-us/security/blog/2026/04/30/email-threat-landscape-q1-2026-trends-and-insights/).

Smartphone access makes QR codes practical

The basic reason QR codes work as a mass-market bridge is that most users already carry a QR scanner: their phone camera. Pew Research Center reports that 98% of U.S. adults own a cellphone of some kind and 91% own a smartphone, based on surveys of U.S. adults conducted from 2002 through 2025.

That does not mean every QR placement will work. It means the access barrier is low. Scan success still depends on print size, contrast, quiet zone, glare, lighting, and whether the destination is useful on mobile.

• Use QR codes when the audience is likely to have a phone in hand
• Design the landing page for mobile first
• Use SVG or high-resolution PNG when printing
• Scan-test in the real environment, not only on a desktop monitor

Mobile internet scale supports QR adoption

GSMA reported that by the end of 2024, 4.7 billion people used mobile internet, equal to 58% of the world population. That matters because most QR actions end in a mobile web page, payment app, form, map, PDF, contact card, WhatsApp chat, or app handoff.

For WebToolsPlanet users, the practical takeaway is to think of a QR code as a mobile entry point, not a decorative print element. A QR code on a poster, menu, invoice, classroom handout, or package should open a mobile-friendly destination that answers the scanner’s next question quickly.

Retail packaging is moving toward 2D barcodes

GS1 describes Sunrise 2027 as a major retail transition from 1D UPC barcodes to 2D barcodes like QR codes that can provide more transparency, traceability, and richer product data. GS1 US says the initiative supports retailers so point-of-sale systems can read and process next-generation 2D codes.

This does not mean every small business needs GS1 Digital Link immediately. It does mean QR-style 2D codes are becoming more normal in packaging and retail workflows. Brands should understand the difference between a simple static QR code for customer content and a standards-based retail barcode for checkout and product identity.

• Simple marketing QR: link to a product page, manual, warranty, or campaign landing page
• GS1 Digital Link QR: standards-based retail/product identity use cases
• Transition phase: many packages may carry both traditional 1D barcodes and 2D codes

Consumers scan when the value is clear

The strongest QR placements give an obvious benefit: menu, WiFi, payment, contact save, warranty, form, instructions, coupon, map, or product details. GS1 US highlights 2025 survey data showing consumer interest in scannable product information, including 79% more likely to purchase products with a scannable QR code that provides additional information.

The number is useful because it points to the right kind of QR experience. People are more likely to scan when the QR promises specific, relevant information. A vague "scan me" label is weaker than "Scan for ingredients", "Scan for setup guide", or "Scan for today’s menu".

• Restaurant: "Scan for menu"
• Packaging: "Scan for setup guide"
• Event: "Scan for schedule"
• Business card: "Scan to save contact"
• Counter sign: "Scan to pay" or "Scan for WiFi"

QR security risk is growing too

QR adoption also creates risk. Microsoft’s Q1 2026 email threat landscape report found QR code phishing rose from 7.6 million attacks in January to 18.7 million in March, a 146% increase over the quarter. Microsoft also reported PDF attachments were the dominant delivery method for QR code attacks during that quarter.

For legitimate QR campaigns, the lesson is not to avoid QR codes. The lesson is to make trust signals clear. Put QR codes on controlled surfaces, use recognizable domains, avoid suspicious shortened links where trust matters, and tell users what will open after scanning.

• Use a recognizable domain for public campaigns
• Avoid replacing public QR codes with stickers or unverified labels
• Tell scanners what the QR opens before they scan
• For internal teams, train users to inspect suspicious QR destinations

Best QR code use cases in 2026

The best QR use cases reduce friction in a real-world workflow. The QR code should save typing, open the right app, avoid a manual search, or carry information that would be impractical to print in full.

Use focused tools when the intent is specific. A WhatsApp QR, vCard QR, PDF QR, menu QR, Google Form QR, WiFi QR, or UPI QR page can explain the use case better than a generic URL QR setup.

• [WhatsApp QR Code Generator](/generator/whatsapp-qr-code-generator) for customer chat and pre-filled messages
• [vCard QR Code Generator](/generator/vcard-qr-code-generator) for business cards and badges
• [PDF QR Code Generator](/generator/pdf-qr-code-generator) for documents, catalogs, resumes, and manuals
• [Menu QR Code Generator](/generator/menu-qr-code-generator) for restaurant and cafe menus
• [Google Form QR Code Generator](/generator/google-form-qr-code-generator) for surveys, RSVP, attendance, and feedback
• [WiFi QR Code Generator](/generator/wifi-qr-code-generator) for guest network access
• [UPI QR Code Generator](/generator/upi-qr-code-generator) for Indian payment collection

QR code planning checklist

Statistics help justify QR investment, but execution decides whether the code actually works. Before printing or publishing, make sure the QR destination, design, and physical placement all support the user’s scanning context.

• Use the [QR Code Generator](/generator/qr-code-generator) for broad static QR creation
• Use the [QR Code Tools hub](/collections/qr-code-tools) to choose a focused generator by QR type
• Use SVG for print and high-resolution PNG only when SVG is not accepted
• Keep dark modules on a light background unless you have tested the alternate design
• Print a test copy and scan it at the final distance and lighting
• Verify that the mobile destination loads quickly and matches the promise near the QR code

FAQ

These are the questions people usually ask when evaluating whether QR codes are still useful in 2026.

• Are QR codes still used in 2026? Yes. Smartphone adoption, mobile internet use, retail 2D barcode migration, and offline-to-online workflows all continue to support QR use.
• Are static QR codes enough? For stable URLs, menus, WiFi, contact cards, UPI payments, and form links, static QR codes are often enough. Use dynamic redirects only when edits or scan analytics matter.
• What is the biggest QR code risk? Poor execution. A QR that is too small, low contrast, broken, private, or suspicious-looking will underperform even if QR adoption is high.
• Are QR codes safe? Legitimate QR codes are safe when they point to trusted destinations, but QR phishing is growing. Use recognizable domains and clear scan labels.
• How often should QR statistics be updated? Update a statistics post at least annually, and sooner when major sources such as GS1, Microsoft, Pew, or GSMA publish new data.