QR codes for insurance

Insurers use QR codes for policy-document access, claims initiation with photo upload, and agent vCards on cards and letters. The compliance rule is absolute: nothing identifying a policyholder goes in a payload. A QR code on paper is readable by anyone who sees the page — use opaque tokens, never policy numbers.

Where codes fit the insurance lifecycle

Code	Where	Why
Policy documents	Renewal letters, welcome packs	The current schedule and wording, always the latest version
Claims initiation	Policy wallet card, windscreen sticker	The claim starts at the roadside with photo upload, not a call queue
Agent vCard	Business cards, letters	The broker saved to contacts in one scan
Phone	Emergency assistance card	One tap to the claims line when typing is the last thing wanted

The claims code is the one that earns its place

A claim begins at a stressful moment — a crash, a burst pipe — where a phone call means hold music and a form means finding a login. A claims code on the small card kept in the glovebox or policy wallet opens a first-notification flow: what happened, where, photos straight from the camera. The photo-upload step is the payoff; evidence captured at the scene is worth more than any later description. Print the card at credit-card size with a 2 cm code — it is read in-hand — and give the reverse to the assistance phone code for the cases where a human is the product.

The payload rule

Insurance runs on exactly the data that must never appear in a QR payload. A code is plain text: anyone who photographs a letter on a desk or a windscreen sticker can read it. So:

Never encode policy numbers, names, registrations or claim references. Under GDPR reasoning, a policy number tied to a printed address is personal data you have published.
Personalised letters may carry per-recipient codes — but the URL token must be an opaque single-purpose token that resolves only after the recipient authenticates. The token identifies the letter, the login identifies the person.
Health-line products inherit the stricter HIPAA-context rules: nothing in a payload should even reveal that a person has a policy of a given type.

Direct mail is where insurers actually print codes

Renewals and quotes go out on paper at volume, which makes insurance one of the few sectors where QR in direct mail is the main channel. Per-recipient tokens are a bulk generation job — one row per letter, opaque token in each URL — and the response rate becomes measurable per campaign without any third-party tracking service.

What goes wrong

Policy numbers in payloads on letters that pass through many hands.
A claims code that opens the marketing homepage; at the roadside, that is a failure.
Renewal codes pointing at a quote journey that expires before the renewal window ends.

FAQ

Can an insurance QR code contain the policy number?

No. The printed payload is readable by anyone who sees the document, and it persists in photographs and recycling. Use an opaque token that resolves only after the policyholder authenticates — the code identifies the document, never the person.

What is the best QR code use in insurance?

Claims initiation. A code on the wallet or glovebox card opens first notification of loss with photo upload, capturing scene evidence at the moment it exists. It shortens the claim and the call queue at once.

Do QR codes in insurance direct mail work?

They are one of the few measurable responses paper offers: per-letter tokens generated in bulk make scan-through rates visible per campaign. Keep tokens opaque and the landing journey alive for the full life of the mailing.