Can a donor verify a receipt without an account?
Yes. The verification page is public and needs no sign-in, no registration and no app.
Scanning the QR code printed on the receipt opens it directly; the link can also be pasted into any browser.
Feature
Every copy of a receipt that leaves the system carries a QR code. Scanning it opens a public page stating the organisation, the donor, the amount, the date and whether the receipt is still valid — with no account, no app and no sign-in.
A donor scans the QR code on their receipt. It opens a page addressed by two things together: the receipt number printed on the document, and a verification token carried in the code. The page confirms the receipt against the trust’s own record and states whether it is still valid.
Nothing is disclosed to someone who does not hold a receipt. Every unsuccessful attempt — unknown token, mismatched number, withdrawn link — returns one identical answer, so the page cannot be used to find out which receipts exist.
Enough to confirm the document in their hand, and no more than that.
A verification link is created the first time a receipt is delivered, downloaded or printed — which is the first moment anybody could be holding a copy to check.
Yes. The verification page is public and needs no sign-in, no registration and no app.
Scanning the QR code printed on the receipt opens it directly; the link can also be pasted into any browser.
Because receipt numbers are sequential, a page addressed by the number alone would let anyone read a trust’s entire donor register by counting from 0001.
The number stays in the link because it is what is printed on the paper; the token carried in the QR code is what authorises the disclosure. Receipt numbers are also unique only within one organisation and one financial year, so the number by itself does not identify a receipt at all.
The organisation that issued the receipt, the donor’s name as it was frozen onto it, the amount, the receipt date and number, what the donation was towards, how it was paid, and whether an 80G deduction was claimed on it.
The donor’s tax identifier is shown only as its last few characters — enough for the holder to confirm it matches the document in their hand, and not enough for anyone to collect.
The page says so, in those words, and tells the donor not to claim it.
A voided receipt keeps its number and keeps its verification link, so a donor holding an old copy finds out that it has been withdrawn rather than finding a page that does not load.
Every failure returns the same answer, whatever went wrong.
An unknown token, a valid token whose printed number does not match, a withdrawn link and a receipt that was never issued are indistinguishable from outside. Telling them apart would turn the page into a way of discovering which receipt numbers a trust has actually issued.
No. One receipt has one verification link, for as long as it exists.
The link is printed into a QR code on paper and pasted into emails sent years earlier, so issuing a new one per send would silently break every copy already in circulation.
Register your organisation and every receipt you issue carries a verification link from the first time it is sent, downloaded or printed.