Feature

A QR code the donor can check the receipt against

Every copy of a receipt that leaves the system carries a QR code. Scanning it opens a public page stating the organisation, the donor, the amount, the date and whether the receipt is still valid — with no account, no app and no sign-in.

How does receipt verification work?

A donor scans the QR code on their receipt. It opens a page addressed by two things together: the receipt number printed on the document, and a verification token carried in the code. The page confirms the receipt against the trust’s own record and states whether it is still valid.

Nothing is disclosed to someone who does not hold a receipt. Every unsuccessful attempt — unknown token, mismatched number, withdrawn link — returns one identical answer, so the page cannot be used to find out which receipts exist.

What the donor sees

Enough to confirm the document in their hand, and no more than that.

The organisation
Its name and address, its PAN and registration number, and its 80G registration number.
The receipt
Number, date, financial year, and whether it is issued or has been voided.
The donor
The name as frozen onto the receipt, shown in full — a verification that will not confirm the name on the document verifies nothing an assessing officer can use.
The tax identifier
Masked to its last few characters. Enough to match against the document, useless to harvest.
The donation
The amount, what it was towards, its donation type, how it was paid, and whether 80G was claimed on it.
The public verification page a receipt’s QR code opens, confirming the receipt is genuine and listing its number, date, donor, masked donor identifier, amount and status.
The page a donor reaches from the code on their receipt. The tax identifier is shown only as its last few characters, and the status line is what changes if the trust later voids the receipt.

When the link exists

A verification link is created the first time a receipt is delivered, downloaded or printed — which is the first moment anybody could be holding a copy to check.

  • Only for a final receipt. A draft has no number to verify, and a verifiable link to one would mean a donor holding a document the trust has not issued and being told it checks out.
  • Stable for the life of the receipt. The same receipt always resolves to the same link, because that link is already on paper.
  • Survives voiding. A voided receipt still verifies — and the answer is that it has been withdrawn.

Frequently asked questions

Can a donor verify a receipt without an account?

Yes. The verification page is public and needs no sign-in, no registration and no app.

Scanning the QR code printed on the receipt opens it directly; the link can also be pasted into any browser.

Why does the link need a token as well as the receipt number?

Because receipt numbers are sequential, a page addressed by the number alone would let anyone read a trust’s entire donor register by counting from 0001.

The number stays in the link because it is what is printed on the paper; the token carried in the QR code is what authorises the disclosure. Receipt numbers are also unique only within one organisation and one financial year, so the number by itself does not identify a receipt at all.

What does the verification page show?

The organisation that issued the receipt, the donor’s name as it was frozen onto it, the amount, the receipt date and number, what the donation was towards, how it was paid, and whether an 80G deduction was claimed on it.

The donor’s tax identifier is shown only as its last few characters — enough for the holder to confirm it matches the document in their hand, and not enough for anyone to collect.

What happens if the receipt was voided?

The page says so, in those words, and tells the donor not to claim it.

A voided receipt keeps its number and keeps its verification link, so a donor holding an old copy finds out that it has been withdrawn rather than finding a page that does not load.

What happens if someone tries a link that is not valid?

Every failure returns the same answer, whatever went wrong.

An unknown token, a valid token whose printed number does not match, a withdrawn link and a receipt that was never issued are indistinguishable from outside. Telling them apart would turn the page into a way of discovering which receipt numbers a trust has actually issued.

Does the link change if the receipt is re-sent?

No. One receipt has one verification link, for as long as it exists.

The link is printed into a QR code on paper and pasted into emails sent years earlier, so issuing a new one per send would silently break every copy already in circulation.

Give your donors something they can check

Register your organisation and every receipt you issue carries a verification link from the first time it is sent, downloaded or printed.