Competitive Teardown · Pre-Build Research

The QR-code generators run one playbook behind six storefronts.

A forensic teardown of six QR-code sites — how the products work, how they make money, how they acquire users, and where a competitor can win. The short version: nearly all of them sell the same thing the same way, and the way is a subscription trap.

qr.io qr-code.io online-qr-generator.com getqr.com qrcreator.com qrcodecreator.com
Prepared 2026-06-30 6 targets · 7 research streams Method · forensic, cited, adversarially verified
3
distinct operators behind the 6 sites — not 6 companies
~0.9M
monthly US searches for “qr code generator” at a cheap ~$1.5 CPC
$39.99/mo
the modal price — for a single feature set, billing-cadence the only knob
1.5
category leader’s organic Trustpilot, ~9,200 reviews — the model breeds resentment

Bottom line up front

Building the software is the easy part. The product is a weekend; the business is a moat made of printed paper and billing status. Every dynamic QR code routes through a redirect the platform owns, so whether your already-printed code still works is a decision the platform makes each month based on whether you’ve paid. That single mechanic — not features — is the entire category.

Five of the six sites are built on it explicitly: a “free” generator, a card-gated trial long enough to print and distribute your codes, then a silent rollover to ~$40/mo and codes that die if you stop paying. The result is a category that prints money and breeds hatred in equal measure — the market leader (Bitly’s qr-code-generator.com) sits at 1.5★ across ~9,200 reviews, and “scam” is a category search term.

Why these six are the target

None of these six is a brand. They’re anonymous shells (or a 4-person team) running the same play: buy high-intent search traffic cheaply (~$1.5 CPC) and convert it through an engineered funnel into a ~$40/mo subscription. The moat isn’t recognition or organic reach — it’s funnel execution and ad math. That is exactly what makes them replicable: AltumCode literally runs on a ~$60 off-the-shelf script.

Bitly, Canva and Adobe are explicitly out of scope — their moat is brand + bundled distribution built over a decade, which we’d never out-build and don’t need to. We’re not chasing the brand-aware buyer; we’re competing for the searcher who clicks an ad and needs a code now and has no loyalty to anyone. The build question (§07) is which funnel to run — not how to beat an incumbent.

01 / The market & the money mechanic

A large, evergreen, near-commoditized market with one genuinely clever business model

Demand is huge and durable; features are a race to the bottom; the money is entirely in the dynamic-QR subscription and its lock-in.

The demand is real and self-qualifying

“qr code generator” draws roughly 0.8–1M searches/month at an unusually cheap CPC (~$1.5), and a large share of intent is explicitly “free”. The generator-software segment is ~$1–2B growing ~11–14%/yr (analyst estimates diverge ~10×, so treat as directional). The COVID habit stuck: consumer scanning is now near-saturated (~89M US scanners), but business deployment is still growing — queue management +156%, feedback +22%, payments +19% since 2022. New use cases, not new scanners, are the growth.

Static is free forever. Dynamic is a subscription to a redirect you don’t own.

A static code encodes the destination directly — it works forever, can’t be tracked or edited, and earns no recurring revenue. A dynamic code encodes a short URL on the platform’s redirect server; every scan asks that server where to go, and the answer depends on your billing status. Three things turn this into a goldmine:

The hostage mechanic — verbatim from the category

“The physical QR code in your hand is unchanged… but the short URL itself now returns an error. The expiration is a business decision, not a technical necessity.” The code is printed on table tents, packaging, business cards (physical switching cost); the redirect is non-portable (you can’t migrate it); so the owner pays for years before a reprint is rational.

This is why every platform funnels free-static users toward paid-dynamic, and why ~82% of trial users never converting doesn’t matter — the trap only needs the minority who printed during the trial. They convert under duress and then can’t churn without reprinting. The platform monetizes fear of breakage, not feature usage.

The big brands aren’t the target — and that’s the point

Bitly/Egoditor ($100M+ ARR) owns both the #1 SEO property (qr-code-generator.com) and the #1 free tool (QRCode Monkey); Canva and Adobe bundle static QR into design suites with hundreds of millions of users; Uniqode and Flowcode sell upmarket on compliance and design. Their moat is brand + organic + bundled distribution built over a decade — un-replicable, and not what we’re after. The six targets prove you don’t need any of it: they capture a profitable slice with zero brand recognition, purely by buying cheap high-intent traffic and converting it through the trap. That’s the replicable money — and it’s the whole reason these six, not the incumbents, are the study set.

02 / The operator map

Six storefronts, three operators

The biggest single finding: the targets aren’t six competitors. They cluster into three operations — one near-legitimate, two running the trap from behind shell entities and white-label code.

OPERATOR A

The Maldonado brothers

qr.io least predatory
Who
Lucas & Franco Maldonado, Argentina · ~4 people · founded 2020 (sibling product “Convertify”)
Product
Custom-built JS app — the only one here that isn’t white-label or a shell-fronted funnel
Pricing
$39.99/mo or $350/yr, single tier; 7-day trial with a 7-day money-back guarantee
Channel
SEO-led — deep how-to blog, ~2.1M visits/mo (−19% YoY)
Reputation
Trustpilot 4.3 (paid profile) vs Product Hunt 1.4/5 (organic)
Tell
Static codes survive trial; only dynamic die. Money-back guarantee makes it the cleanest of the six.
Verdict A real, small, SEO-driven business. Beatable on price tiers, vector export (PNG/SVG only), analytics depth, and a genuine free tier — but it’s the model to study, not the villain to attack.
OPERATOR B

Ruby Labs / Convertizing

getqr.com · qrcreator.com · qrcodecreator.com trial trap
Who
Convertizing Ltd (Dublin, dir. Fuad Aliyev) + Hint America Inc (Delaware maildrop); likely under the Ruby Labs D2C-subscription portfolio (Roman Taranov) inferred. Baku engineering.
Structure
One product, three brands — shared backend api.qrcodecreator.com, one checkout, cross-domain A/B routing into getqr.com/?step=1
Pricing
$1 / 7-day trial → $39.99/mo ($89.99/qtr, $239.99/yr). Non-refundable in practice; disguised annual billing.
Channel
Paid search + ~30-locale programmatic SEO. qrcodecreator.com ~1.24M visits/mo, 61% paid
Stack
Next.js/Vercel/Payload + a heavy CRO machine (GrowthBook, VWO, Hotjar, Clarity, Mixpanel, Customer.io)
Reputation
Trustpilot 4.2 (paid, “Invited”-padded) vs Sitejabber 1.6 / SmartCustomer 1.5
Verdict The most sophisticated conversion machine of the set, and the most aggressive billing. Genuinely useful extras (link-health monitoring, access rules, templates). Soft underbelly: trust, disguised billing, no self-serve API, aged-domain SEO that rents traffic.
OPERATOR C

The AltumCode funnel

online-qr-generator.com · qr-code.io trial trap
Who
Anonymous — NameCheap, Iceland privacy, Toronto maildrop. Inferred tie to a Spanish operator (qrfy.com) via the Paycomet gateway + a cookie-string leak inferred
Product
Reskinned AltumCode “Altum” PHP SaaS script (CodeCanyon) — no proprietary tech at all
Pricing
€49.95/mo (€29.95 qtr, €19.95/mo annual ≈ €239 upfront). 14-day trial → auto-renew. “We don’t refund any subscriptions” (verbatim, both sites)
Channel
Pure paid-search arbitrage on “qr code generator” intent + exact-match domains; no blog, no organic moat
Redirect
Routes through scanned.page / scan.pageblacklist-flagged (35/100 trust)
Reputation
Trustpilot ~4.6 (gamed) vs ScamAdviser ~0/100
Verdict The weakest operators technically — off-the-shelf script, rented traffic, blacklisted redirect domain. qr-code.io grouping is inferred (shared script, mirror redirect domains, identical €49.95 non-refundable pricing); residual uncertainty on its exact ownership.

03 / Side by side

The six targets at a glance

Same product shape almost everywhere. The meaningful axes are price, refund posture, whether your codes die when you stop paying, and how they buy traffic.

SiteOperatorEntry / trialFull priceRefundsCodes die on cancelPrimary channelTrafficTech
qr.ioMaldonado · standalone Argentina, ~4 ppl 7-day trial $39.99/mo$350/yr 7-day money-back dynamic only SEO / content ~2.1M/mo Custom JS · Stripe
qr-code.ioAltumCode cluster Anon (Spain?) inf. 7–14 day trial €49.95/mo none yes Paid search AltumCode script
online-qr-generator.comAltumCode cluster Anon (Spain?) inf. 14-day · forced signup €49.95/mo€239/yr none yes Paid-search arbitrage ~1M+/mo AltumCode script
getqr.comRuby Labs trio Convertizing / Hint $1 / 7-day trial $39.99/mo$239.99/yr none in practice yes Paid search Next.js/Vercel
qrcreator.comRuby Labs trio Convertizing / Hint $1 / 7-day trial $39.99/mo none in practice yes Paid search (landing brand) small Next.js · AI-QR beta
qrcodecreator.comRuby Labs trio Convertizing Ltd (Dublin) $1 / 7-day trial $39.99/mo$239.99/yr none in practice yes Paid + locale SEO ~1.24M/mo Next.js/Vercel/Payload

Prices captured live 2026-06-30; no accounts created, no payment entered. “none in practice” = a refund policy exists on paper but reviewers consistently report refused/ignored requests.

04 / The monetization playbook

How the trap is engineered, step by step

Five of six run an almost identical funnel. Knowing each step is knowing exactly which step to invert if trust is your wedge.

The funnel, as built
  • Free hook. “Free QR Code Generator” ranks/advertises on the highest-intent terms; you land straight in a working builder.
  • Effort investment. You design, customize, preview — anonymous and free. Sunk cost grows.
  • Gated download. The one thing you came for — the download — requires an account and a card.
  • Teaser trial. $1-for-7-days (Ruby Labs) or a 14-day “free” trial (AltumCode). Long enough to print and distribute.
  • Silent rollover. Auto-converts to ~$40/mo. Annual plans show a “/mo” figure but charge the full year up front; “$0 at checkout” hides it.
  • Hostage enforcement. Stop paying → the dynamic redirect dies → your printed codes break. Refunds refused.
Pricing pattern across the set
  • One feature set, one knob. Every “tier” is identical features — only billing cadence changes. There is no real Lite/Pro/Enterprise ladder, so there’s no cheap on-ramp.
  • ~$40/mo modal price (qr.io, Ruby Labs) or €49.95/mo (AltumCode) — wildly above the $2.99–$15/mo of honest competitors.
  • Annual = the real product: ~$240/€239 captured up front, framed as “Save 50%”.
  • API is enterprise-gated (“talk to us”) everywhere — no self-serve developer path.
  • No one-time / lifetime option — yet a huge share of demand is “I need one code once” (event, invite, menu).
  • Payments: Stripe (qr.io, Ruby Labs add PayPal+Braintree for recovery); AltumCode uses Spain’s Paycomet.

05 / The marketing playbook

Two acquisition religions: earn the traffic, or rent it

SEO (qr.io) vs paid-search arbitrage (everyone else)

qr.io is the outlier — it owns an aged domain and a deep how-to blog and pulls ~2.1M organic visits/mo. The other two operators rent their traffic: Ruby Labs and AltumCode both pour spend into Google/Bing ads on “qr code generator” intent and convert via the trap (qrcodecreator.com is ~61% paid search). Their blogs are 404s. This makes them CAC-exposed and vulnerable to rising CPCs — and beatable by anyone willing to build an organic + content moat.

Programmatic locale SEO + exact-match domains

Ruby Labs runs a ~30-locale programmatic SEO machine (302-URL sitemap cloning /pricing, /qr-creator, /qr-maker across country variants). AltumCode leans on exact-match domains (“online qr generator”) to soak up generic search. Both are cheap, scalable, and shallow.

Review-gating as a reputation moat

The tell is everywhere: paid Trustpilot profiles inflated with “Invited” reviews (Ruby Labs 4.2, AltumCode ~4.6, qr.io 4.3) sitting directly on top of brutal organic sentiment elsewhere (Sitejabber 1.6, ScamAdviser ~0/100, Product Hunt 1.4, SmartCustomer 1.5). They reply fast to public reviews, slowly-or-never to refund requests. Competitors weaponize this with “alternatives” and “seeing a $49.95 charge? that’s not us” pages.

Affiliate programs mirror the lock-in

The category pays 20–30% recurring/lifetime affiliate commissions (qr.io 30% lifetime, 90-day cookie; ME-QR 25% lifetime) — which only makes sense because the underlying subscriptions are sticky. Every distributed physical code is also a free brand impression, so the funnel is partly self-feeding.

06 / Feature parity & scope

What’s table-stakes, and where the gaps are

Feature support across the three operators. Green = present, amber = partial/limited, red = absent. The absences are the scope-shaping opportunities.

Capabilityqr.ioAltumCodeoqg · qr-code.ioRuby Labsgetqr · etc
15+ QR content types (URL, vCard, WiFi, PDF, menu, social, WhatsApp, app, payment…) 14+ 16 15–25+
Static + dynamic codes
Design: color, shape, logo, frames, templates
Vector export (EPS / PDF for print) PNG/SVG only +EPS +EPS
Scan analytics (count, geo, device/OS, time, export) shallow
Dashboard, folders, code management
Link-health monitoring / access rules (schedule, auto-pause, scan caps)
Password protection
AI-designed QR codes beta
Self-serve API / webhooks / bulk CSV limited API enterprise-gated
Integrations (Zapier, Shopify, Canva, CRM/POS)
Team workspaces / roles / SSO 5 seats “unlimited users”
Genuine free tier / no-signup download hidden free plan
Codes that don’t die on cancellation (“delete-only”) static only
Transparent pricing / easy cancel / refunds money-back
Custom / reputable branded redirect domain blacklisted

Table-stakes — day-one scope

Match these or you’re not in the category
  • 15+ content types in one builder (URL, vCard, WiFi, PDF, menu/multi-link, social, WhatsApp, app-store, image, video, email, SMS, location, coupon, payment)
  • Static + dynamic codes with editable destinations
  • Full design: colors, shapes, logo, frames, reusable templates
  • Export PNG / SVG / JPG / EPS at high resolution (vector matters for print — qr.io’s gap)
  • Scan analytics: count, unique, geo, device/OS, time, CSV/Excel export
  • Account dashboard with folders; anonymous build + live preview

Differentiators — where to win

None of the six does these well
  • Trust by design: real free static tier, no-signup download, codes that never die punitively, transparent monthly pricing, self-serve cancel + honest refunds
  • Self-serve API + webhooks + bulk CSV — all six gate the API to enterprise
  • Integrations: Zapier, Shopify, Canva, POS/CRM — completely absent
  • Reputable, branded/custom redirect domain (AltumCode’s is blacklisted)
  • Team workspaces, roles, SSO — the upmarket flank is open
  • Content/SEO moat + vertical focus (restaurants, events, real estate, CPG/GS1 packaging) vs rented paid traffic
  • Match the good extras: link-health monitoring, access rules, AI-designed codes

07 / The play & the questions that decide it

This is a paid-acquisition arbitrage on a commodity product

The product is a weekend build; the business is ad math. These operators capture a profitable slice with no brand by buying cheap high-intent traffic and converting it through the trap. To replicate it, four questions decide the build — none of them is “how do we beat Bitly.”

Can we win the paid-search auction profitably?

“qr code generator” and its long tail clear at ~$1.5 CPC, and three operators already run it at a profit — so the auction is winnable. The build question is the funnel math: what conversion rate × price × retention clears CAC plus the chargeback and refund cost this model carries? Model LTV:CAC before a line of product code.

Same trap, or a cleaner funnel? (the core product decision)

Maximal LTV comes from the full hostage trap — silent rollover, codes die on cancel, no refunds — but it carries chargeback losses, FTC click-to-cancel exposure, ad-account bans, and a ~1.5★ reputation ceiling. A cleaner funnel (honest trial, codes that don’t die punitively) lowers LTV but cuts those costs and opens organic/word-of-mouth. Pick the point on that curve deliberately — it defines the product.

Where’s our edge in the funnel?

Cloning the product is trivial; the margin is in out-converting them. Candidates: a sharper price point (all six are ~$40/mo with no cheap tier — a $9–15 tier or a one-time option captures the “one code once” buyer they alienate), a faster/cleaner builder, a trust angle that cuts chargebacks, or vertical landing pages (restaurant menu, event, real-estate) that convert a segment better than a generic tool.

Which traffic — and can it diversify off pure ad-rent?

Paid search is the proven channel but it’s CAC-exposed and ad-account-fragile (especially running the trap). qr.io shows the alternative — an SEO/content moat — but it’s slow to build. Do we start as pure paid-acquisition (fast, like Ruby Labs / AltumCode) and layer SEO + affiliates later, or commit to a vertical / long-tail SEO wedge from day one?

Appendix · per-site profiles

The six, individually

qr.ioOPERATOR A

The one real business — small, SEO-built, comparatively honest.

Model
$39.99/mo · 7-day trial + money-back
Strength
Huge SEO footprint, polished UX, 14+ types
Gap
No EPS/PDF, shallow analytics, limited API, no free tier
qr-code.ioOPERATOR C inf.

AltumCode script behind a name that trades on the qr.io brand.

Model
€49.95/mo · 7–14 day trial · no refunds
Strength
Full type breadth, aggressive review-gating
Gap
No proprietary tech, no API, toxic billing reputation
online-qr-generator.comOPERATOR C

Pure paid-search arbitrage on a reskinned white-label script.

Model
€49.95/mo · 14-day · forced signup · no refunds
Strength
Complete type set, EPS export, conversion funnel
Gap
Anonymous operator, blacklisted redirect, no organic moat, ~0/100 ScamAdviser
getqr.comOPERATOR B

The checkout engine the Ruby Labs trio funnels into.

Model
$1/7-day → $39.99/mo · disguised annual
Strength
Link-health monitoring, access rules, templates; elite CRO stack
Gap
Silent auto-renew, no real free tier, no self-serve API, no SEO moat
qrcreator.comOPERATOR B

A top-of-funnel landing brand that routes into getqr’s paywall.

Model
$1/7-day → $39.99/mo
Strength
AI artistic-QR beta hook; aged premium domain (2009)
Gap
Same trap; thin standalone substance
qrcodecreator.comOPERATOR B

The trio’s SEO front — 30-locale programmatic landing pages.

Model
$1/7-day → $39.99/mo · $239.99/yr
Strength
~1.24M visits/mo, 25+ types, vector output, AI QR
Gap
Sitejabber 1.6★, deceptive billing, dissolved UK entity, opaque operator