How Parcel Locker QR Codes Work

Did you know? When a parcel locker opens after you scan a code, the black-and-white squares do not operate the door motor directly. The code provides information that a locker system can use to decide whether a particular compartment should open. The real work involves delivery records, access checks, electronic locks and careful tracking of what happens next.

Quick answer: a parcel-locker QR code, barcode or collection PIN is a way to present a pickup or drop-off credential. The station or related app checks the credential under the operator’s rules, identifies the authorised compartment and, when valid, tells the locker controller to release the appropriate door. The service then records the collection or return event. A scan identifies a request; the locker system authorises the action.

The 30-second guide

Parcel assigned: a courier deposits a package in a locker and the system associates it with a compartment and collection arrangement.
Recipient notified: the legitimate operator sends details, which may include a PIN, barcode or QR pickup credential.
Recipient arrives: the person goes to the specific locker station and selects the collection function.
Credential checked: the system validates the code or PIN for the intended parcel and station.
Compartment opens: the locker releases an authorised door, and the customer takes the parcel and closes it.

A familiar Singapore example

Singapore has several parcel-locker arrangements, and their collection instructions are not identical. SingPost’s POPStation guidance says a customer can choose “Collect My Parcel” and enter a PIN or scan a QR code at the indicated station. Other collection and return workflows may use barcodes, labels or numeric codes.

Singapore also has the Pick Network, a nationwide parcel-locker initiative associated with IMDA. Depending on the delivery provider and integration, its collection experience may ask for a PIN rather than a QR code. The general security principle remains the same: a credential must be checked against a relevant delivery record before the compartment is opened.

So when somebody says “all parcel lockers use QR codes”, the answer is no. The user-facing credential varies. The important technology is the connection between a machine-readable or typed reference and an authorised delivery action.

Step 1: The courier places a parcel in a real compartment

Imagine a family orders a book online and chooses collection from a nearby locker. The courier’s delivery system assigns that package to a location. When the parcel arrives, the authorised courier deposits it in an available compartment under the operator’s process.

The locker system must know more than the recipient’s name. It needs a record linking the consignment, collection location and compartment, along with a current state such as available for collection. The operator may also enforce a collection deadline.

This is why a QR image printed on a box cannot independently open the door. The system has to recognise a valid connection to the parcel deposited at that station.

Step 2: A collection credential becomes available

When the parcel is ready, the provider notifies the intended recipient through its supported channel, perhaps an app, SMS or email. A code may represent a pickup reference or authorisation token, while a numeric PIN offers an alternative at a keypad or touchscreen.

The content of a QR code is not necessarily the recipient’s full address or order details. It may carry a short value that the station or its backend uses to find the relevant pickup record. Different operators design their systems differently, so you cannot infer the exact data format just by seeing a square.

A sensible security design treats collection credentials as sensitive, even if they are only a few digits or a simple-looking barcode. A person who obtains an active valid credential may be able to attempt collection, subject to the locker’s additional checks.

Step 3: The scanner reads but does not decide

At the station, the barcode reader or camera interprets the printed or displayed code. It converts the visible symbol into digital information. That is the ordinary scanning step described in our introduction to QR codes.

What happens next belongs to the locker software. The system checks whether the request matches a valid, current collection record. It may verify the station, pickup time, parcel status or other operator-specific conditions. Some systems work online; others may have locally available information with later synchronisation. Customers generally do not see these details.

Important distinction: a scanner can read an expired code perfectly. That does not mean the locker should unlock. Reading a credential and deciding it is still authorised are different jobs.

Step 4: The controller releases a compartment

If the request meets the operator’s rules, the software tells the locker hardware to release the relevant door. The customer opens it, removes the package and closes the compartment. The system may track door status and record the event so that the order no longer appears available for collection.

A successful code scan is not proof that the correct item was inside. If a compartment is empty, contains another person’s item or cannot be opened, the customer should follow the provider’s official support process. SingPost publishes help guidance for cases involving an empty locker, the wrong item or an incorrect door.

The purpose of the digital record is to link the physical event to the delivery workflow. It needs to support customer questions, courier operations and any investigation of a disputed handover.

Why a code may work only once

For a normal collection, an operator generally wants to prevent repeated pickup attempts after the parcel has been retrieved. The system can change the collection record to a completed or otherwise closed state, invalidating the associated credential under its rules.

That does not mean the QR image itself disappears. You can often still display or scan a screenshot of the code. The difference is in the backend’s current authorisation state. A second presentation should not be treated as a new parcel just because the same black-and-white squares are readable.

This is similar to checking into an event with a one-entry ticket, but the locker must additionally operate physical hardware and manage the parcel compartment.

What about returning an unwanted purchase?

A return is the same idea in reverse, though the steps vary. An online store or courier first has to establish that a particular item is eligible for return through the chosen service. The customer may receive a return reference or barcode and instructions for selecting a station.

At the locker, the customer follows the operator’s return flow. For example, SingPost’s POPStation instructions describe choosing a return option, scanning a barcode and following prompts to enter other required information, select a locker size and receive a receipt. That is an example of a provider-specific process—not a promise that every QR code or return label works at every station.

The system must record more than the door opening. It also needs to associate the dropped-off parcel with the return consignment so the courier can retrieve it and the retailer can process the return under its own policies.

Why a pickup code should be treated like a key

A PIN or QR collection credential may allow access to an item of real value. Do not post it on social media, send screenshots to strangers or casually forward a delivery notification that contains it. If someone else is authorised to collect on your behalf, use the service’s intended process and verify the instructions.

Be alert when an unexpected message tells you to scan a QR code and pay an urgent redelivery fee. That may be a scam rather than the actual collection procedure. The safest approach is to open the delivery provider’s official app or type its known website yourself and look up the shipment.

A logo and a familiar parcel-tracking design do not authenticate a message. Equally, the existence of a QR code does not prove that the sender owns the locker station.

If the locker does not open, diagnose the right layer

Reader cannot scan: clean the screen, adjust brightness or use the PIN alternative where supported.
Code is readable but rejected: the parcel may be at a different station, already collected, expired or otherwise not eligible under the operator’s rules.
Screen confirms but door stays locked: the problem may involve the station’s hardware or its communication with the controller.
Door opens but parcel is missing: stop and contact the official operator; do not assume the transaction was correct.
Return rejected: confirm the approved return channel, label, reference and accepted parcel size.

The key is to distinguish scanning, validation, physical unlocking and delivery confirmation. Each is a different step, and each can fail for different reasons.

A five-minute lesson in state changes

Draw six boxes on paper: ordered, in transit, deposited, ready for collection, door opened and collected. Connect them with arrows. Then imagine the recipient scans an old screenshot after the parcel has already been collected. Which state tells the system not to release another package?

Next, draw a branch for return initiated → return dropped off → courier collected. Ask which state a customer needs to see before considering a return successfully handed over. This makes a real-world computer-science principle visible: a process is not just data, but data that changes state over time.

Questions people often ask

Can I use a phone camera to unlock a parcel locker?

Usually you follow the operator’s app or the locker station’s touchscreen and scanner. A general phone camera reading the code is not itself an unlock command.

Are parcel-locker codes always QR codes?

No. Systems may use numeric PINs, QR codes or other barcodes, depending on the service and stage of the workflow.

Can someone collect my parcel from a photo of my code?

A screenshot may reproduce the encoded credential. Whether it is sufficient depends on the operator’s checks, so treat valid collection codes as sensitive.

Why can the code scan while the locker still refuses it?

Because scanning only retrieves the data. The operator must also verify that the credential is authorised for that parcel, location and state.

The idea to remember

A parcel-locker QR code is a request for access, not a tiny electronic key that can force open a door. Behind a fast scan is a careful process linking a delivery record to a physical compartment and an accountable handover.

Explore the wider system in How Singapore Connects | Parcel Lockers, Letterboxes and Last-Mile Delivery, The Gold Standard of Parcel Locker Services and How Event Tickets and Check-In Prevent Reuse.

Sources and further reading

SingPost: POPStation — current locker collection and return workflows, including PIN and QR scanning.
SingPost: Collection Points and POPStation Support — troubleshooting a wrong or empty compartment.
IMDA Singapore: Pick Network — the broader national parcel-locker network.
Shopee Singapore: Pick! Locker Collection — an example of PIN-based pickup rather than assuming all lockers use QR codes.

Explore the How QR Codes Work series

From the mathematics inside each square to the everyday services it opens, explore another part of the series below.

How QR Codes Work | How Parcel Lockers Verify Collection and Returns