QR Codes for Government
Public notices residents can trust
Residents scan government QR codes on public notices, permit forms, meeting agendas, and service updates, and each one should open an official page they can trust.
The FBI warned in January 2026 that a North Korean group is sending government staff malicious QR codes in phishing emails.
Every code needs a trusted address and an accessible page behind it.
160+ reviews from
Where Government Agencies Use QR Codes
The best uses replace a long web address on something residents already read.
Public Notices
From the notice board to the full text
A code on a posted notice opens the full document, hearing date, and comment form.
Permits and Applications
Forms without the office visit
A code on a counter sign or mailer opens the online permit or license application.
Meeting Agendas
The agenda in every seat
A code at the meeting room door opens the agenda, past minutes, and the livestream.
Service Updates
Closures and changes, kept current
A code at a facility entrance opens today’s hours, closures, and service alerts.
What Are QR Codes for Government Agencies?
A government QR code is a code on a notice, form, sign, or mailer that opens an agency web page, application, agenda, or service update when a resident scans it. The page it opens is agency web content, so it has to meet the accessibility standard that applies to that agency.
Security and Accessibility Rules Government Codes Must Meet
Two federal sources shape how agencies should use QR codes.
- Active threat: The FBI’s FLASH alert AC-000001-MW, released January 8, 2026, describes Kimsuky actors embedding malicious QR codes in spearphishing emails to government entities.
- How the attack works: The codes open fake login pages for services like Microsoft 365, Okta, or VPN portals, moving the victim from a managed computer to a personal phone.
- FBI advice: Verify unsolicited QR codes through a separate channel before scanning, and use phishing-resistant multi-factor authentication.
- Federal agencies: The Revised 508 Standards require electronic content to meet WCAG 2.0 Level A and AA, including pages a QR code opens.
- State and local agencies: The DOJ’s Title II rule sets WCAG 2.1, Level AA, with compliance from April 26, 2027 for governments with 50,000 or more people.
What a Government QR Code Can Open
- Notice documents: The full public notice, with dates and comment instructions.
- Applications: Permit, license, and benefit forms.
- Meeting materials: Agendas, minutes, and the meeting livestream.
- Service status: Office hours, closures, and alerts.
- Surveys: Short resident feedback forms after a service visit.
How to Create a Government QR Code in TLinky
Keep every agency code on one recognizable domain, so staff and residents have a baseline to check unfamiliar codes against.
Here is the step by step guide:
- Log in to your TLinky account, click Create, then select QR Code.
- Name the code and choose a domain (domains apply to dynamic codes and depend on your plan).
- Select Link for a form or notice page, or File for a PDF agenda.
- Enter the page URL, or upload the file.
- Customize Templates, Colors, and Design to match the agency’s branding, click Generate QR, then Save Changes and download.
Pro Tip: Print the destination web address under each code, so residents can confirm where it leads before they scan.
Post a Code Residents Can Verify
Where Agencies Place QR Codes
- Public notice boards: A code on each posted notice for the full document.
- Service counters: Application and appointment codes where residents wait.
- Meeting rooms: Agenda and livestream codes at the door.
- Mailers and bills: A code that opens the payment portal or account page, with the address printed beside it.
- Facility entrances: Hours and closure codes for parks, libraries, and offices, including QR codes on street signs at trailheads and parking.
Government QR Code Checks
- Never request logins through an emailed code: Staff should treat unsolicited QR codes in email as suspicious, following the FBI’s advice.
- Use one official domain: Residents can only verify a code if every agency code opens the same recognizable address.
- Make linked pages accessible: Check the destination page against WCAG, not just the printed sign.
- Inspect posted codes regularly: Fake stickers over real codes are a known scam in public spaces.
- Keep a paper or phone option: Some residents cannot scan, so list a phone number or counter service too.
Update Notices Without Reposting
Post the code once. Swap the notice, agenda, or form behind it as each meeting or deadline comes and goes.
Government QR Code Questions
How serious is the QR code phishing threat to local agencies?
The FBI’s January 2026 FLASH alert describes a nation-state group targeting government entities with malicious QR codes. Any agency with staff email accounts should train staff to verify unsolicited codes before scanning.
Does Section 508 apply to the page a QR code opens?
For federal agencies, yes. The Revised 508 Standards cover electronic content, which includes any page a federal QR code opens, at WCAG 2.0 Level A and AA.
What is the difference between Section 508 and the ADA Title II rule?
Section 508 applies to federal agencies and uses WCAG 2.0 Level AA. The DOJ’s Title II rule applies to state and local governments and uses WCAG 2.1, Level AA, with compliance dates in 2027 and 2028.
Should residents trust every QR code posted at a government building?
They should check that the code opens the agency’s official web address, especially before entering personal or payment details. Agencies help by printing the address next to each code.
How often should an agency check its posted QR codes?
Check high-traffic codes, such as those at counters and on notice boards, at least weekly, and check every code whenever its notice or page changes.
See How QR Codes Can Grow Your Business
Public-facing organizations use the same notice, form, and accessibility practices.
TLinky’s Recognitions & Awards
Trusted by the Industry Experts that YOU trust
Start Your Agency QR Code
Put notices, forms, and agendas on one official domain residents can verify, then update each page as deadlines change.