QR codes for nonprofit fundraising: what the data says, and the disclosure rule agencies miss

Direct mail is not dying. Nonprofit direct mail revenue grew 9% in 2025, gift count grew 4%, and the average direct mail gift reached $120, according to the M+R Benchmarks 2026 report, one of the fundraising sector's most closely watched annual studies. Nonprofits still raise roughly $0.66 through the mail for every $1 they raise online. That is the backdrop against which a QR code on an appeal letter, a gala signage board or a donor recognition wall actually has to earn its place, and it is a backdrop almost no QR-marketing content bothers to check.

Search "QR code for nonprofit fundraising" and nearly every result is a donor-CRM vendor's blog post repeating the same three unsourced statistics: a made-up percentage lift in response rate, a made-up percentage lift in average gift, and a single retold case study that does not trace back to any public source. None of them mention the fundraising sector's own benchmark data, and none of them mention the one thing that should worry any agency adding a QR code to a client's national mail campaign: a QR code can quietly turn a single-state mailer into a nationwide online solicitation, with real registration consequences attached. This guide covers both: what the data actually supports, and what the compliance risk actually is.

Why nonprofits reach for a QR code on a printed appeal

The pitch is simple. A donor opens an envelope, reads a letter, and is asked to give. Without a QR code, the ask is a printed URL that has to be typed out by hand on a phone, which is exactly the kind of friction that kills a spontaneous gift. A QR code turns "type this address into your browser" into "point your camera at this," which matters because direct mail response rates for nonprofits are genuinely strong when the ask is easy to act on: 5 to 9% on a house list of existing donors, and 2 to 4.4% even on a cold prospect list, according to the 2025 ANA/DMA Response Rate Report. For comparison, the cross-industry average direct mail response rate sits around 4.4%, against roughly 0.12% for cold email, a response rate gap of well over 30 to 1.

None of that response rate data is QR-specific. It measures whether people respond to direct mail at all, not whether a QR code beats a printed URL. That distinction matters, because nearly every "QR codes lift response by 25 to 40%" claim circulating on vendor blogs traces back to nothing, no named study, no disclosed sample size, just one blog copying another. The honest position is that a QR code removes a specific piece of friction (typing a URL on a phone) rather than that it has been independently proven to lift response by any particular percentage. That is still a real, useful thing to remove. It is just not the same claim.

Where a QR code genuinely earns its place in a fundraising campaign

A few placements make the friction argument concretely:

• An appeal letter or reply card, where the QR code sits next to the same printed URL (never as a replacement for it) so a donor can either type or scan.
• Gala or event signage, where guests are asked to give in the room, on the spot, and a QR code on a table card or screen is faster than anyone reading out a URL.
• A donor recognition wall or plaque, a permanent, evergreen placement that should point at a stable donation page rather than a time-limited campaign.
• An annual report or print newsletter, where a reader who is already engaged with the organisation's story is a warm prospect for a low-friction ask.
• A retail partner's till-side collection point (a checkout donation ask, a coin jar with a card beside it), where a QR code lets someone give without carrying cash.

The placements that do not earn a QR code are ones where the printed URL was never the bottleneck in the first place, a large-print newsletter mailed almost entirely to donors who will read it on paper and give by cheque regardless, for instance. Adding a code there is decoration, not a functional improvement.

Static or dynamic: match the code to the campaign's shelf life

A permanent donor wall should carry a static or dynamic code pointed at the organisation's evergreen donation page, and either works there since the destination rarely changes. A specific campaign, a year-end appeal, a disaster response drive, a gala tied to a particular date, is a different case entirely, and it should always use a dynamic code. Year-end giving is disproportionately concentrated: December accounts for roughly 37% of annual online nonprofit revenue, and the final week of the year alone accounts for about 10% of it, per M+R Benchmarks 2026. A dynamic code lets an agency point that appeal at a countdown landing page before 31 December and swap it to a thank-you or a matching-gift follow-up page the moment the calendar turns over, without reprinting anything, and it is the only way to get scan volume and timing data back for the client's report.

The mobile-desktop mismatch: what the giving data actually shows

Here is the part that most advice around QR-driven fundraising skips entirely. Desktop visitors make up 48% of donation page traffic but generate 72% of donation revenue, with an average gift of $168, while mobile visitors average an $88 gift, per M+R Benchmarks 2026. Overall site conversion sits around 1.6% of visitors, and revenue per visitor averages $1.33.

A QR code, by its nature, sends every single scan to a mobile device. That is not a flaw in the tactic, but it does mean an agency should set expectations correctly with a nonprofit client: a QR-driven appeal is very likely to produce a real but smaller average gift than the organisation's desktop-heavy email or website traffic, and the destination page has to be built for that reality rather than for a desktop-first flow. That means a genuinely mobile-optimised donation form, one-tap options like Apple Pay or Google Pay rather than a form that expects someone to type a 16-digit card number on a phone keyboard, and a page that loads fast on a mobile connection at a crowded gala or straight out of a mailbox. A beautiful desktop donation page that has never been tested on a phone will quietly waste most of the goodwill a QR code just captured.

The compliance trap most agencies never see coming

This is the section a nonprofit's legal counsel will thank you for reading, and the one no QR-marketing content anywhere currently covers. A charity soliciting donations only within its home state, by mail, to its existing local donor list, generally has a straightforward compliance picture. The moment that same appeal carries a QR code linking to an online donation page reachable from anywhere, the picture can change, because the guidance that state charity regulators actually use, the Charleston Principles, adopted by the National Association of State Charity Officials (NASCO) and the National Association of Attorneys General in 1999 and published in 2001, treats an internet-reachable solicitation that can accept a gift from a resident of another state as potentially triggering that state's charitable solicitation registration requirement, regardless of where the physical mailer itself was sent.

Roughly 40 US jurisdictions require charitable solicitation registration when a nonprofit solicits their residents, and the trigger is written broadly enough to cover mail, email, and QR-linked online appeals alike, not just a charity's own website. A single multi-state registration form, the Unified Registration Statement (URS), is accepted by around 36 of those jurisdictions, which eases the administrative burden but does not remove the underlying obligation to actually register (or confirm an applicable exemption) in each state where the appeal reaches a donor and accepts a gift.

Separately, 25 US states require a written charitable disclosure statement (identifying the organisation, and typically noting that a copy of its financial and registration information is available from the state) on solicitation materials, and at least two, Florida and Nevada, explicitly extend that disclosure duty to electronic and online solicitation mechanisms, not just paper. A QR code that lands on a donation page without the required disclosure text is not a design oversight; in a state with that rule on the books, it is a compliance gap.

None of this means an agency should avoid QR codes on nonprofit mail. It means flagging the multi-state reach question to the client and their counsel before a national appeal goes out with a QR code on it, the same way an agency would flag any other change that expands where and how a solicitation lands. If the client already has multi-state registration in place (most established national nonprofits do), this is a non-issue. If the mailer has historically only gone to one state's donor list and the client has never registered anywhere else, a QR code on that same letter is worth a short conversation before it goes to print.

Protecting donors from a QR code that is not what it looks like

QR-based fraud is not hypothetical for anyone handling money in public. The FTC issued a consumer alert in December 2023 specifically warning that scammers hide malicious links behind QR codes, and both the FTC and the FBI issued further alerts in 2025 about fraud schemes built around unsolicited QR codes, a pattern that maps directly onto the physical vulnerability of a donation setup: a till-side coin jar, a gala table card, or a printed poster with a QR code is trivially easy for someone to cover with a fraudulent sticker pointing at a look-alike payment page.

The defence is straightforward and mirrors good practice for any physical QR code an agency puts in public: always run a dynamic code, so a compromised or tampered placement can be redirected or killed centrally the moment it is spotted, rather than requiring every physical instance to be found and reprinted. Always print the destination domain in plain text next to the code, in a typeface a donor can actually read, so a fake sticker covering the code is more obviously wrong to anyone who checks. And never route a donation QR code through a bare, unbranded link shortener; a domain the donor recognises as the charity's own is one of the simplest trust signals available, and it is also one of the easiest for an agency to get right from the first print run.

Measuring what the code actually raised

A QR code on a mail appeal, a gala table, and an annual report are all the same organisation asking for the same kind of gift, but a client will want to know which one actually worked. Tag each placement's destination with its own UTM parameters so a scan from the appeal letter is distinguishable in the CRM or analytics platform from a scan off the gala signage or the annual report insert, following a naming convention that survives being reused across every future print run rather than inventing one per campaign. Report scan volume alongside actual completed gifts and average gift size, the same way you would for any other print campaign, and be candid with the client that a scan which never converts to a gift is still a signal, a donor engaged enough to pick up their phone, even if the ask did not land that particular time.

If the nonprofit client also serves donors in the EU, the same donation page collecting names, emails and payment details through a QR-driven flow needs the same GDPR groundwork any tracked scan requires, consent language and data handling included, since a charitable purpose does not exempt a data controller from the underlying rules.

Frequently asked questions

Do QR codes actually increase nonprofit donations?

There is no independently verified study proving a specific percentage lift, despite what several vendor blogs claim. What a QR code reliably does is remove the friction of typing a URL by hand on a phone, which matters given that nonprofit direct mail already earns respectable response rates on its own. Treat it as friction removal, not a guaranteed conversion boost.

What is the average direct mail response rate for nonprofits?

Around 5 to 9% on a house list of existing donors and 2 to 4.4% on a cold prospect list, according to the 2025 ANA/DMA Response Rate Report, compared with a cross-industry average of about 4.4% for direct mail generally and roughly 0.12% for cold email.

Does adding a QR code to a fundraising mailer trigger charity registration in other states?

It can. Under the Charleston Principles used by state charity regulators, an internet-reachable donation page that can accept a gift from a resident of another state may trigger that state's charitable solicitation registration requirement, regardless of where the physical letter was mailed. Roughly 40 US jurisdictions have a registration trigger of this kind.

Do QR-code donation appeals need a disclosure statement?

In many US states, yes. Twenty-five states require a charitable disclosure statement on solicitation materials, and Florida and Nevada explicitly extend that requirement to electronic and online solicitation methods, which a QR-linked donation page falls under.

Should a nonprofit use a static or dynamic QR code for fundraising?

A dynamic code for anything tied to a specific campaign or date, a year-end appeal, a gala, a disaster response drive, since the destination can change and the code gives you scan data. A static code is acceptable only for a permanent placement, such as a donor wall, pointing at a stable, evergreen donation page.

What share of nonprofit donations comes from mobile versus desktop?

Desktop visitors are 48% of donation page traffic but generate 72% of revenue, averaging a $168 gift, while mobile visitors average an $88 gift, per M+R Benchmarks 2026. Since every QR scan lands on a mobile device, expect a real but comparatively smaller average gift from QR-driven traffic, and make sure the donation page is genuinely built for mobile.

Are QR code donation asks safe from scams?

The tactic itself is safe, but the physical placement can be tampered with, a fraudulent sticker over a legitimate code on a coin jar or poster, for instance. The FTC and FBI have both issued consumer alerts about QR-based fraud schemes. Use a dynamic code, print the destination domain in plain text beside it, and route through a recognisable branded domain rather than a bare shortener.

The short version

A QR code on a nonprofit's mail appeal, event signage or donor wall removes real friction, typing a URL on a phone, without any independently proven lift in response rate beyond that. Use a dynamic code for anything tied to a specific campaign, a static code only for permanent placements, and build the destination page for the mobile-heavy, smaller-average-gift traffic a QR code actually sends. Before a QR code goes on a national mail campaign, have the five-minute conversation with the client about whether it changes where the appeal is legally reaching donors, since roughly 40 states can treat an internet-reachable donation link as a solicitation trigger regardless of where the letter itself was posted.