How ticket QR codes and gate check-in work

If you've ever wondered why a photo of a QR code isn't enough to get into an event — or worried that someone could copy your ticket — this short explainer covers how modern e-tickets actually work, and why they're far harder to fake than paper.

A QR code is just a pointer

The QR code on your ticket isn't a secret key by itself. It points to a ticket record held by the platform that issued it. When it's scanned, the scanner looks that record up and asks a simple question: is this ticket valid, and has it been used yet? Everything important happens in that lookup, not in the image.

That's the key idea. The picture can be copied endlessly; the record can only be in one state at a time.

Why codes can't be guessed

Each ticket carries a long random code — so long that the number of possible codes is astronomically larger than the number of tickets that will ever exist. There's no pattern to copy and no realistic way to guess a working code. So an attacker can't invent valid tickets; the only thing they can do is copy a real one. Which brings us to the gate.

First scan wins

At the door, organisers scan tickets with a gate scanner. The first time a code is scanned, that ticket checks in — and from that instant, every later scan of the same code shows already checked in, along with the time it happened.

Play that out for a copied ticket:

• You and someone holding a copy of your ticket both show up.
• Whoever gets scanned first is checked in and walks through.
• The second scan — yours or theirs — shows the ticket is already used.

This is why a screenshot sold five times only ever gets one person in. It also means you should treat your own ticket like cash: don't post the QR publicly, because anyone who scans a copy before you could check in ahead of you.

Attendee names settle disputes

For events that collect attendee names, each ticket also carries the name it was issued or assigned to. If there's ever a question at the gate about who a ticket belongs to, the name on the record settles it. It's an extra layer that makes copied or "borrowed" tickets harder to pass off.

Verifying before the gate

You don't have to wait until the event to check a ticket. Any ticket's code can be checked at any time on the public status page — useful when:

• You're buying from someone and want to confirm the ticket is real and unused.
• You want to reassure yourself that your own ticket is valid before travelling.

A valid status on the official page is real proof. A screenshot someone sends you is not — they could have used or copied the ticket after taking the picture.

Transfers and resale, done safely

Because the protection lives in the record rather than the image, tickets can be moved safely when the organiser allows it. Transferring a ticket or reselling it through an in-platform exchange reassigns the underlying record to the new holder — so the new ticket is fully verifiable and the old copy stops working. That's the safe alternative to handing over a screenshot in a chat.

In short

A QR ticket is hard to fake not because the picture is clever, but because it's tied to a single record that can only be used once. Verify before you buy, keep your own QR private, and use proper transfers rather than screenshots — and the system does the rest.