Detection means the system sees a marker. Scanning means the marker is captured. Verification means the system resolves whether the physical object should be trusted. Only verification produces authority.

A copied QR code can still scan, redirect, and appear valid. That is the problem. When a QR code is used as proof of authenticity, copying the image can preserve the trust signal without proving the physical object is real.

Traditional QR codes were built for connectivity, not security. Because identity is exposed in the image, copying the code reproduces trust. At scale, this creates structural verification risk. Deterministic identity verification replaces readable or link-based models with protocol-level resolution, ensuring each scan returns a binary verdict and copying produces anomaly, not legitimacy.