Skip to content

Checkpoint patrols with NFC/QR tags: how they work

In a checkpoint patrol, NFC or QR tags are fixed at set points around the site and the guard scans each one with a phone or handheld device on the way past. Every scan records which point, what time and which account. The log proves the tag was scanned; it does not prove the guard noticed what was around it. That is why the route, randomisation and the handling of missed checkpoints matter as much as the technology.

Updated: 6 min read

How does an NFC/QR checkpoint patrol work?

Each checkpoint has a tag with a unique code. The guard scans it on arrival, and the system records the point, the time and the account that scanned it.

  1. The checkpoints are chosen and a tag is fixed at each one.
  2. The schedule is set: which points, how many times per shift, in which time windows.
  3. The guard walks the route and scans each tag.
  4. Each scan is logged with its time — and, where the system supports it, a note or photo.
  5. Points not scanned within their window show up as missed.

The result is a record that someone who was not there can check: the supervisor, the operations team or you.

NFC or QR: which is better for patrol checkpoints?

NFC only reads at very close range and is harder to copy; QR is easy to print and readable by any camera, but a photo of it can be scanned from anywhere. For points that carry real risk, use NFC, or QR with an extra check.

  • NFC: the guard holds the device almost against the tag. It needs an NFC-capable device. The tag is not necessarily a visible code, so a simple photo cannot copy it — but specialist tools can, so it is not tamper-proof.
  • QR: readable with any phone camera and easy to print. The weakness: a guard can photograph the code and scan it without going to the point.
  • Extra checks: recording the location at the moment of the scan, a photo of the point, or a supervisor’s spot check. Ask your provider which of these it uses.

Whichever technology you choose, fix the tags so they cannot be peeled off and moved, and check from time to time that they are still in place.

How do I design a patrol route and frequency?

Start from risk, not from the floor plan: checkpoints where damage or entry can happen, and a frequency matched to when the site is most exposed. There is no right number for everyone; you agree it with your provider for your own site.

  • Entrances and perimeter: doors, gates, loading ramps, points along the fence.
  • Critical areas: storerooms, electrical panels, plant rooms, areas with expensive equipment.
  • Camera blind spots: places only a person can see.
  • Points with a history: where incidents happened or doors were found open.

A few well-placed points beat many. If the patrol turns into a hurried string of scans, the guard watches the device, not the site. For frequency, think about when the site is empty, when shifts change and when deliveries arrive.

Example (hypothetical, not a standard): “every perimeter point at least once in each two-hour window between 22:00 and 06:00”. You set the number and the windows together with your provider.

Why should security patrols not be predictable?

Because a patrol that passes the same point at the same time every night tells anyone watching when that point will be empty. The fix is time windows and a varying order, not a fixed timetable.

  • Windows, not times: “once between 01:00 and 03:00” instead of “at 02:00”.
  • Varying order: the route does not always start at the same point.
  • Extra unscheduled passes at the most exposed points.

Randomising does not mean losing control. The schedule stays measurable: in each window a scan either happened or it did not.

What does a patrol log prove, and what does it not prove?

It proves a specific tag was scanned at a specific time by a specific account. It does not prove the guard actually checked the area, or what happened between points.

  • It proves: the device was at the tag (or a copy of it) at a time; the order and pace of the patrol; which points were missed.
  • It does not prove: that the guard looked at the door next to the tag; that it was the same person, if the device passes from hand to hand; that a photo of the code was not scanned; what happened on site between two points.

So the patrol log is read alongside the shift report and the incident log, and checked with supervisor site visits. OVIT brings patrols, incidents and reports together in the Guardly platform, so the operations team and the client read them in the same live picture.

What should happen when checkpoints are missed?

Every missed checkpoint needs a reason written in the shift report, and repeatedly missed points need a change to the route or the supervision. Where the system allows it, a missed point should raise an alert while the shift is still running.

  1. Alert as it happens: the supervisor calls the guard while there is still time to go back.
  2. Reason in the report: an incident elsewhere, a locked area, a damaged tag, or an omission.
  3. Fix the cause: replace the tag, move a point that cannot be reached, retrain.
  4. Pattern: if the same point is missed every night, the problem is the route or the workload, not only the guard.
  5. Monthly review: the completion rate and missed points are discussed with the provider.

A missed point with an honest explanation is worth more than a perfect rate nobody checks. For choosing a provider overall, see how to choose a security company.

At a glance

  • Every scan records point, time and account — not that the area was actually checked.
  • NFC is harder to copy; a QR code can be photographed and scanned from anywhere.
  • Routes start from risk: entrances, critical areas, camera blind spots, points with a history.
  • Time windows and a varying order make patrols unpredictable but still measurable.
  • Every missed checkpoint needs a reason; repeated misses need a change of route or supervision.

Frequently asked questions

Can a guard fake a QR checkpoint patrol?

Yes, by photographing the code and scanning it from elsewhere. That is why high-risk points use NFC, or QR with an extra check such as location recording, a photo or a supervisor visit.

How many checkpoints does a site need?

As many as it takes to cover the entrances, critical areas and blind spots — no more. There is no general number; the risk assessment of your own site sets it.

Does a patrol log prove the job was done properly?

Not fully. It proves tags were scanned at certain times; the quality of the checks shows in the shift report, the incidents and the supervisor’s site visits.

Want us to look at your site?

Talk to the OVIT operations team — a real person answers.

Request a proposal