Many manufacturers rely on QR codes to verify the authenticity of their products. However, as we have already explained in a previous article, QR codes are not a suitable solution for this problem. A recent real-world example involving a vape pen demonstrates once again why this method is not only insecure but also prone to errors.
The Test: A Vape Pen with a QR Code for Authentication
Upon purchasing a vape pen, an electronic smoking device, the packaging displayed a label that read: “Attention – scan QR code to verify authenticity.” The QR code was covered by a holographic label with a reflective surface, meaning it had to be scratched off before scanning. While this may seem like a security feature, it introduced additional challenges.
Scanning Issues Due to Holographic Label and Small QR Code
Since the QR code was printed on a mirror-like foil, scanning was particularly difficult. The camera angle and lighting conditions had to be just right to avoid reflections that made it hard to focus on the code. This made the scanning process frustrating and time-consuming.
Additionally, the packaging was relatively small, meaning the QR code itself was tiny. This required the user to hold the device at a precise distance to successfully scan it, adding to the inconvenience.
However, once the QR code was finally scanned, further issues became apparent.
1. The QR Code Can Be Copied and Reused
Once the QR code was revealed, it could easily be photographed. Using this image, the code was scanned on another device—and successfully verified. This means that a counterfeiter could simply copy the original QR code and print it onto multiple fake vape pens, making authentication meaningless.
2. Error Messages Due to Different Networks
The QR code was tested on two different phones—one using an Austrian mobile network and the other using a German network. When scanned on both devices, an error message appeared: “This product may be counterfeit.” It seems that the system checks where the QR code is scanned and mistakenly assumes that a code cannot be scanned from two geographically separated locations in a short period. However, in reality, there are many legitimate scenarios where this could happen.
3. Multiple Scans Trigger Additional Errors
Another test revealed that after scanning the same QR code multiple times, the system displayed another warning: “This product may be counterfeit.” This suggests that the system assumes that a QR code scanned multiple times must be fake—probably based on the logic that a counterfeiter would print the same QR code on many products. However, this approach also leads to genuine products being falsely flagged as counterfeit just because they were scanned multiple times.
A Step in the Right Direction – But Not the Right Solution
It’s great to see that companies are actively addressing the issue of counterfeit products. More and more businesses are implementing authentication measures, which is a positive development. What’s particularly interesting is that we are now seeing these efforts not only for luxury goods but also for everyday, low-cost items—like a vape pen. This demonstrates that even inexpensive products are being counterfeited, and companies are looking for ways to protect consumers.
However, while the intention is good, QR codes are simply not the right solution. They are easily duplicated and can lead to false alarms, ultimately weakening consumer trust in authentication systems.
Conclusion: TAGBASE Provides the Reliable Solution
This analysis clearly demonstrates that QR codes do not offer effective protection against counterfeiting—even for vape pens, where fake products could pose serious health risks. Instead, a more secure and advanced approach is needed—one that cannot be copied or manipulated.
TAGBASE has developed the ideal solution for this problem. Unlike QR codes, TAGBASE uses NFC chips that generate dynamic content every time they are scanned. This means that each interaction creates a unique, non-replicable response, making it impossible for counterfeiters to duplicate.
With TAGBASE’s technology, vape pens and any other physical product can be effectively protected from counterfeiting, providing both manufacturers and consumers with a truly reliable authentication method.
For a more in-depth discussion on why QR codes fail in product authentication, check out our full article.