India is the world's largest QR market.
India crossed 14 billion UPI transactions/month in 2025 — more than every other country combined. ~85% of those payments are initiated by a QR scan rather than a typed VPA. That makes the humble QR code India's default payment UI.
The biggest growth driver in 2024-25 wasn't the metros — it was Tier-2 and Tier-3 cities. Jaipur, Lucknow, Indore, Coimbatore, and Visakhapatnam each grew their monthly QR scan count by 60-80% YoY, while Delhi-NCR and Mumbai grew at "only" 18-22%.
The chai-stall economy is genuinely digital now. We see daily QR scan-volume from the small-businesses sector outpacing organized retail.
Beyond payments: 11 categories are now mainstream.
Five years ago, "QR code" in India meant "scan to pay". In 2026 it means a lot more. Our customer base shows 11 distinct categories with double-digit % share:
Payment (62%) — UPI VPAs on counters, food carts, parking, donations.
Menu (8%) — restaurants, cafés, hotels; up sharply post-COVID.
Profile / vCard (5%) — networking events, business cards, conferences.
Wi-Fi (5%) — cafés, hotels, co-working spaces.
Marketing campaign (4%) — magazine ads, billboards, packaging.
Product / packaging (3%) — warranty, manuals, repeat-order coupons.
Review prompts (3%) — Google review push, NPS surveys, feedback forms.
Wedding & events (3%) — invites, check-ins, photo galleries.
Real estate (2%) — yard signs, brochures with lead-gate.
Education (2%) — attendance, certificates, library.
Other (3%) — including app installs, audio tours, IoT pairing.
What India scans, by device.
Android dominates (~83%) vs iOS (~16%); other (~1%). 91% of all scans happen via the phone's built-in camera app — no third-party scanner needed. The remaining 9% is split between WhatsApp's in-app scanner (5%) and dedicated scanner apps (4%).
Time-of-day distribution shows two peaks: 11am-1pm (lunch + bank-counter trips) and 7pm-9pm (evening shopping + restaurant dinners). Sunday is the highest-scan day by ~12%, driven by family outings.
The dynamic-QR opportunity is large and under-served.
Static QRs make up ~94% of QRs in circulation. But our data shows that dynamic QRs (the editable, trackable kind) account for ~71% of marketing-attributable scans, despite being the smaller share. That gap is the entire opportunity.
Three categories where dynamic QRs are already at >50% share — and growing — are: marketing campaigns (87% dynamic), product packaging (62%), and event tickets (98%). The categories where adoption is still under 10% — and represent the biggest TAM — are: UPI payment, Wi-Fi sharing, and personal vCards.
Phishing remains the #1 QR concern.
Our Trust Engine flagged 2.1% of all submitted destination URLs as risky in 2025 (compared to 0.8% in 2023). Common red flags: typosquatted bank domains, URL shorteners hiding the real destination, freshly-registered TLDs (.click, .top, .xyz).
In the same period, scanner-side phishing complaints (where a scanned QR led to a fraudulent page) rose 41% YoY. The Indian Cyber Crime Coordination Centre (I4C) registered ~38,000 QR-related complaints in 2025.
Best practice for issuers: always use a dynamic QR through a trusted intermediary. The customer scans `qrquick.in/r/abc` — their phone can verify our domain before redirecting — rather than a long, opaque URL they can't evaluate.