Detecting Duplicate and Cloned QR Codes With Scan-Pattern Analytics

Not every counterfeit QR code is a crude forgery. Some are exact photographic clones of a genuine code — and catching those requires looking at scan patterns, not the code itself.

What Scan-Pattern Analytics Actually Catches

A cloned code scanned from two cities on the same day, a code scanned far more often than its batch size could plausibly support, or a code scanned in a sequence that skips expected batch numbers — these are the signals VIGIL's risk-detection layer watches for.

Geo-Distance Anomalies

If a code genuinely sold in one region is scanned from a distant country within an implausible timeframe, that's one of the strongest signals of duplication — stronger than anything visible on the package itself.

Volume Anomalies

A single-unit product code scanned hundreds of times suggests either a viral authentic moment or, far more often, a cloned code circulating across multiple counterfeit units.

Turning Detection Into Action

Pattern detection alone isn't enough — it has to route into a reviewed Counterfeit Risk Alert Brief at the Alert Escalation Review gate, so legitimate edge cases (a shared household, a retail demo unit) don't trigger false enforcement.

Related Reading