In traditional direct mail, response tracking was straightforward. Lenders printed a unique 15-digit Reservation Code or Personal Confirmation Number (PCN) on a paper letter, directed you to a vanity domain (like savewithupgrade.com), and waited for you to type it in.
With smartphone cameras now natively reading QR codes, response rates have jumped. However, marketing teams and risk analytics vendors now pack extensive query parameter strings into those square matrix patterns.
When you point your camera at a direct mail QR code, your browser executes a long string of data parameters into the lender’s attribution engine before you type a single letter of your application form.
Watch: How to inspect mailer QR codes and URL parameters
Demonstration of parsing QR codes, preserving offer codes, and stripping tracking parameters.
The Standard Payload: What Lenders Pack Into a Link
When you decode a typical financial services QR code, you rarely get a clean link like https://lender.com/apply. Instead, you get a string that looks like this:
| Parameter Tag | Category | Function in Lender Funnel |
|---|---|---|
| pcn= / code= | Reservation Code | Ties the recipient to their prescreened credit file to load pre-approved APRs and terms. |
| utm_source / utm_campaign | Attribution Tag | Identifies the mail drop date, envelope creative, copy test, and marketing vendor. |
| zip= / cell_id= | Geographic / List Marker | Passes regional and list segments into the analytics engine prior to form submission. |
| apr-adder / fee-ind | Internal Pricing Tag | Internal testing flags or risk-tier variables embedded in custom offer drops. |
The "Black Box" Parameters: What Do They Mean?
While attribution tags are standard marketing hygiene, real-world direct mail QR codes across personal loan and subprime card mailers sometimes contain non-standard query variables, such as:
apr-adder | fee-ind | auto-approve | inc-range
These variables represent internal server-side testing flags, legacy campaign tiers, or pre-filled targeting indicators.
When scanning a QR code with a default smartphone camera, your browser executes every embedded parameter automatically. You do not get a native option to filter out ad trackers or internal variables prior to landing on the lender site.
Why Clean URL Scanning Protects Consumer Privacy
For consumers evaluating financial products—such as personal debt consolidation loans or balance transfers—privacy and URL verification are essential.
That’s why LendMail includes a client-side QR Privacy Inspector.
Instead of firing off every parameter automatically, LendMail parses the link locally in your browser. It preserves your essential Reservation Code / PCN (so your pre-approved rate remains valid) while letting you strip out third-party ad trackers and inspect the destination domain before opening it.
Frequently asked questions
Is it safe to scan QR codes on credit mailers?
Yes, as long as you verify that the destination domain matches the official lender web address printed on your letter (such as savewithupgrade.com or accept.bestegg.com).
Will stripping tracking parameters cancel my pre-approval?
No. As long as your unique Personal Confirmation Number (PCN) or Reservation Code is present in the URL, removing marketing UTM tags will not impact your pre-screened offer terms.
Where do I find my offer code if I don't want to use the QR code?
Physical mailers print the Reservation Code, Confirmation Code, or Acceptance Code on the upper right panel or response coupon. You can manually enter this code on the lender’s official website.