How NextStamp stops stamp fraud

A paper card can be stamped with a borrowed stamp or filled in with a pen. A digital card can be copied, screenshotted or shared. NextStamp is built so none of that fills a card, and so the few honest mistakes that happen at a busy counter are easy to put right.

A person approves every stamp

Scanning a poster or tapping a tag never adds a stamp on its own. It sends a request, and someone signed in to your business approves it at the till. So a photo of your poster, a screenshot of a customer’s card or a link shared online can at most ask, and your team can say no. See three ways to give a stamp.

The codes match

Each request shows a four-character code on the customer’s phone and on your till. Your team checks they match before approving, so a request from someone outside the shop, or from the wrong customer, isn’t approved by accident.

Requests stay at their outlet

A request only reaches the tills of the outlet whose poster or tag was used, and only the people who work there. A card has one live request at a time: asking again elsewhere cancels the first. Requests close by themselves after 10 minutes.

Limits cap every card

Every card has a limit per visit and per day, one a visit and five a day on a new card, and a card can’t be stamped twice within a minute. Limits count across the whole card, so starting a new round never resets them, and a stamp taken back doesn’t give the allowance back. See stamp limits per visit and per day.

Posters can be replaced

If a photo of your poster is doing the rounds, Replace it on the card’s page. The old code stops working at once and a new one takes its place. Pause and Retire stop a poster too. See print and manage your posters.

Secure taps can’t be faked

A secure tap tag signs every tap with keys only the tag and NextStamp know, so nobody can make a tap up or clone the sticker. Each tap carries a counter that must be higher than the last one counted. Once a tap has asked, its link asks for nothing, and a tap refused by the card’s limits is used up too. A tap read but never sent still works once until a newer one counts, and like every request it waits for your team to approve it.

An ordinary NFC sticker holds your till poster’s link, so it’s exactly as safe as the poster. To take stamp requests only from taps at your counter, switch on Only secure tags ask for stamps on the card’s page. See set up an NFC tap tag.

Codes hold nothing personal

A QR code is a link with a random reference. There’s no name, email or stamp count in it. A customer’s card code opens their card only for them, or for your team at the till.

Every stamp is on the record

Each stamp, reward and correction is recorded with who approved it, where and when. Nothing is ever rewritten: an undo or a correction is a new entry, with its reason. Insights shows the team’s activity at the till to owners and admins.

Mistakes are easy to fix

• Undo in the till’s Just now list takes back a stamp given a moment ago.
• Adjust stamps on a customer’s page adds or removes stamps with a reason, for people you allow to correct stamps.

See using the till and look up a customer and adjust stamps.

Rewards can’t be used twice

Using a reward marks it used in the same step, and a used reward can’t be undone or used again. A reward past its use-by date is refused at the till.