So the punch is based on scanning a QR code? That's correct. The business has a card with a QR code printed on it that you scan to get a "punch." This is par

So the punch is based on scanning a QR code? That's correct. The business has a card with a QR code printed on it that you scan to get a "punch." This is part of the value proposition for the merchants, I guess - they don't need a phone or device of their own at all, they just need to print a few things. The tradeoff is maybe the system is easier to game for the tiny percent that is technically inclined enough to try it.