QR Code Loyalty Programs: How Digital Stamp Cards Work

A digital stamp card keeps the paper card’s logic: one stamp per qualifying visit, a reward after a set number. The difference is that a server keeps the count, and the customer sees it on their phone. There are two common designs.

The first design costs almost nothing to start, but a printed code works anywhere it can be seen, so it needs the controls below. The second is harder to abuse, because every stamp needs staff to scan the customer in person, but it asks more of you and of the customer.

CirculateQR uses the first design. The customer scans the code at your counter and their card opens on their phone, with no app and no login. The card is tied to that phone’s browser. That makes joining quick, but it has a cost you should tell customers about: if they clear their browser data, use a private window, or switch to a new phone, the card doesn’t come with them.

• Staff PIN (optional, 4 to 8 digits). Staff type it on the customer’s phone to add a stamp or confirm a reward. It is checked on the server, the stored PIN is never sent to the customer’s browser, and wrong guesses are limited to 10 every 10 minutes.
• Cooldown between stamps. The templates start at 30 minutes for coffee, 60 for restaurant, salon and the basic card, and 240 for gyms.
• Hourly limit. At most 20 stamp or reward actions per IP address per code per hour.
• Timed confirmations. The reward screen shows the time to the second, so staff can check it against the clock.

The cards come as page templates you open in the Studio: coffee, gym, restaurant, salon and a basic card. CirculateQR does not offer geofencing, rotating codes or a staff approval queue, so the PIN and the cooldown are your main defenses. The features page lists the other hosted page types.

Work it out before you print anything. Take a café selling coffee at $4.50, offering buy 10, get the 11th free:

• The customer pays for 10 coffees: 10 × $4.50 = $45.00.
• They receive 11 coffees with a menu value of 11 × $4.50 = $49.50.
• Discount at menu price: $4.50 ÷ $49.50 = 9.1%.
• At cost it is smaller. If a coffee costs $1.20 in beans, milk and cup (an assumed figure; use your own), the reward costs $1.20 against $45.00 of sales, or 2.7%.

Two things lower the real cost further: not every card gets finished, and some of those visits only happen because of the card. One thing raises it: regulars who would have come anyway now get a free drink. Pick a target a regular can reach in a month or two. A customer who comes twice a week fills a 10-stamp card in five weeks; a weekly customer takes ten.

Most abuse is casual: a regular who scans twice, or a photo of the code passed around a group chat. Match each trick to a control.

Without a PIN, the cooldown and the hourly limit slow abuse but don’t stop it: anyone with a photo of your code can collect a stamp every cooldown period, from anywhere. With a PIN, a stamp needs someone at your till. Staff should type it, never say it aloud, and never write it on the till.

Stamps work when every visit is roughly the same size. Other models fit other businesses:

• Points per dollar suit restaurants, where bills vary widely. A stamp per visit rewards a coffee-only table as much as a party of six.
• Points per service suit salons, where a cut and a color are worth different amounts.
• Tiers give long-term regulars something beyond the next free item, such as an extra shot or priority booking.
• Birthday rewards bring people back once a year. Ask for the day and month only.
• Referral bonuses reward a member when a friend joins. Cap them, or one person with a big group chat earns a lot.

In CirculateQR, the restaurant card awards points per dollar of the bill and the salon card awards points per service. The coffee, restaurant and salon cards have tiers based on lifetime stamps or points, and the coffee card adds birthday rewards and referral bonuses, which you can cap per member. Points, birthday rewards and referral bonuses only work with a staff PIN set, because each one is confirmed by staff in person.

• Members: how many cards were started, compared with how many customers you serve.
• Visits per member per month: the number the program exists to raise.
• Completion: rewards redeemed ÷ members. Very low means the target is too far; very high may mean it is too easy, or being gamed.
• Reward cost: rewards redeemed × cost per reward, against sales.
• Scans versus stamps: a big gap between scans of the counter code and stamps given means people checking their cards, or scanning without buying. See how scan tracking works.

For the coffee, gym, restaurant and salon cards, the code’s page in the CirculateQR dashboard lists members, visits, rewards redeemed and recent activity. To compare two sign-up offers on a flyer, the A/B Landing Page Test on the templates page splits scans between two pages (Artisan and up; each scan is assigned separately). A member’s name is personal data, so say what you collect and why; see the privacy guide.

1. Pick a template: coffee, gym, restaurant, salon or basic.
2. Set the reward and the number of stamps, after doing the cost arithmetic above.
3. Set a staff PIN of 4 to 8 digits and a cooldown between stamps.
4. Print the code for behind the counter, or on a card staff show at payment, not on the door or window.
5. Train staff to type the PIN on the customer’s phone, never say it aloud, and check the time on every reward screen.
6. Test the whole cycle on your own phone: join, stamp, wait out the cooldown, redeem.
7. Review members and rewards monthly, and change the PIN whenever someone leaves.