Spotify Confirms QR Code Checks to Catch Family Plan Users Outside Homes
Co-CEO Alex Norström calls the verification change a routine improvement with no end date, as some users look for ways around the new scan
By AXY Tech Desk ·
Key points
- Spotify co-CEO Alex Norström confirmed on this week's earnings call that a new QR code check targets Family Plan users who do not live together.
- Norström called the change "a routine improvement" rather than a crackdown and said it has no end date.
- Joining a Family plan now requires scanning a code shown on the plan manager's phone, and the code refreshes every few seconds.
- Anyone who misses the seven-day scan window is banned from joining a different Family or Duo plan for 12 months.
Spotify is using a new QR code check to find Family Plan subscribers who do not live with the account holder, and the company's co-CEO says the work will never really finish. Alex Norström confirmed the effort on this week's earnings call. Asked about what has been called a crackdown, he rejected the word. "This is not as much a crackdown as it is actually a routine improvement of our verification methods for our Family Plan," he said.
That phrasing may sound like a technical footnote. For the people on the other end, it is not. Some families have members who moved to another city, another state or another country but still want to stay on the same Premium subscription. Under the new system, a person who wants to join a Family plan has to scan a code on the plan manager's phone. For someone living far away, that is a real obstacle.
What the Family Plan Is Meant to Cover
Spotify Premium Family is a plan that lets several people in one household share a single Premium subscription, with each person keeping their own account. The appeal is simple: one home, one bill, several listeners. Spotify says the plan is only for people who live in the same household, and that rule is the reason the company is now checking more closely.
Norström said the Family Plan has existed for close to 12 or 13 years in Spotify's history. He said it "makes up a pretty significant proportion of our subscriber base." A plan that large is hard to police by asking people to fill in a form. Even small gaps in the rules can add up when they repeat across many accounts.
The household rule is also the basis for the company's position. If a person does not live at the same address as the plan manager, Spotify's stated view is that they should not be on that plan. The new QR code check is the company's latest attempt to turn that view into something it can enforce.
How the QR Code Check Works
The new method puts the verification step on the plan manager's phone. A person trying to join needs to scan the code shown there. The code refreshes every few seconds, so a screenshot sent to a relative in another city stops working almost at once. The scan has to happen live, close enough to the phone that is displaying the code.
That design turns the check into a test of being physically together. It does not ask for a lease, a utility bill or any other document. It asks whether the person can stand in front of the plan manager's phone within a short window. That is simpler than a paperwork check, and it is harder to fake than a copied invitation link.
The trade-off is that the test is blunt. It cannot tell the difference between a sister who lives down the street and one who lives two time zones away, unless the two happen to be near the same phone. The method works on proximity, not on the address listed on an account, and that gap is the kind of thing users are now testing.
The timing matters too. A member has seven days to complete the scan. Miss that window and the penalty is steep, which is covered further below.
Norström's Case That the Change Is Routine
Norström's central argument was that verification is not a single project with a finish line. He said the company will keep working on its methods over time, and he was candid that the current design has weaknesses. "There are certainly ways, over time, to find holes around it," he said. "As that happens, we figure out how to improve it over time."
That is an unusual thing for a company to say about its own enforcement tool. It concedes that people will look for weaknesses and commits to closing them as they appear. The alternative would be a fixed rule that people learn to route around, then stop bothering to follow at all.
He also rejected the idea that this is a one-time change. "This is not something that has an end date," he said. "This is not an implementation that is going to complete. This is just ongoing routine."
For subscribers, that framing is the real signal. A change that ends can be planned around. A process that keeps changing means a family's arrangement may need checking again and again. Anyone who set up a shared plan years ago and assumed it was settled may find that assumption no longer holds.
Why Some Users Are Getting Creative
The new QR code verification method "has forced some users to get creative to stay on their shared Premium subscriptions." Spotify's stated position is that the plan is for people in one household, so those efforts run against what the company says the plan is for.
The people most affected are likely to be those whose households are split. That can mean adult children who moved for work, students at university, partners who live apart or relatives in another country. For them, a shared plan may be the most affordable way to keep a Premium subscription. Losing it means paying for an individual account, which costs more per person than sharing one plan across a household.
The tension here is clear. Spotify is trying to enforce a household rule on a service that people use across borders and across cities. The enforcement tool depends on being in the same place, which is exactly what a relative living far away cannot easily do. The rule and the tool point in slightly different directions, and the users in the middle feel it first.
The 12-Month Ban for a Missed Scan
The penalty is the sharpest part of the system. Anyone who misses the seven-day window to scan the code is banned from joining a different Family or Duo plan for 12 months.
A Duo plan is Spotify's option for two people who share an address, so the ban can reach beyond the Family plan itself. A person who misses the scan could find themselves blocked from joining another plan type, not just the one they were trying to join.
Seven days sounds generous. In practice it is a narrow window, because the code refreshes every few seconds and has to be scanned in person. A member who cannot get near the plan manager's phone during that week could lose the chance to join another plan for a full year. That is a heavier consequence than simply being turned away at the door. It turns one missed moment into a long wait.
For someone who needs a new plan, the block is serious. It may push some people toward paying for an individual subscription, and that change would cost them more each month than a shared plan would.
A Familiar Fight Over Shared Accounts
This is not Spotify's first attempt to limit who can use a Family plan. The company has tried to limit sharing before, and it has consistently said the plans are only for people in the same household. The repeated attempts show how difficult the rule is to enforce at scale.
Shared accounts have been a challenge across the streaming industry. Several video and music services have tightened their rules on sharing accounts beyond a single home. Each of them has found that a household is not always defined by one address anymore, especially for students, young adults and families spread across cities.
Each new check tends to close one gap while leaving others open. That is the pattern Norström described when he talked about finding holes. The question for Spotify is whether it can keep pace without frustrating paying customers who believe they are following the rules.
What Could Come Next for Long-Distance Families
The next test is whether the QR code check holds up as more people try to get around it. Spotify has said it will keep refining the method, and that could mean stricter requirements or new forms of checking. Families who rely on a shared plan should be ready for the rules to change again.
For a family split across distances, the practical question is whether they can join a plan at all. Under the current design, joining requires a live scan from the plan manager's phone. That can make it hard for relatives far away to take part, and it gives the plan manager a central role in every new member's access.
Anyone in that situation should check their account status in the Spotify app before making plan changes. It is sensible not to assume that an old arrangement will keep working. If a scan is missed, the 12-month block on other Family and Duo plans is the consequence to plan around.
For Spotify, the bet is that a clear household rule, enforced with a visible scan, will protect Family plan revenue without pushing too many paying customers away. How that works out will depend on how often the system is tested and how quickly the company responds to the next workaround.
Questions and answers
Why is Spotify using QR codes for Family Plans?
Spotify says the Family Plan is only for people who live in the same household. The QR code method requires a joining member to scan a code shown on the plan manager's phone, which checks that the person is physically close by.
What happens if you miss the QR code scan?
Anyone who misses the seven-day window to scan the code is banned from joining a different Family or Duo plan for 12 months. The code refreshes every few seconds, so the scan has to be done live.
Did Spotify call this a crackdown?
Co-CEO Alex Norström rejected the word crackdown. He said the change is a routine improvement of the company's verification methods and that it has no end date.
Topics: Spotify, Spotify Family Plan, Alex Norström, Spotify Duo, Password sharing, Music streaming, Subscription services
Sources: The Verge