Spotify is asking some Premium Family members to prove they live with the person who pays for the plan by scanning a QR code on that person's phone, in the same place, within 7 days of being notified. Members who miss the window or cannot complete the scan cannot join a different Family or Duo plan for 12 months, according to a Spotify support page. 9to5Google reported the rollout today, citing users on Reddit.

In Short

Spotify Family lets one person pay for several accounts, but only for people who live together, and Spotify now checks this by making the member scan a code off the payer's phone while standing next to them. If you are asked and do not scan within a week, you are blocked from joining any other Family or Duo plan for a year. That matters for the millions of people splitting a cheaper group plan with friends or relatives in other homes, and it could push some of them onto Spotify's free, ad-supported tier.

Two sources, one undated

The material behind this story comes from two places. The first is Spotify's own support article, titled "Address and verification for Family plan," captured from the US edition of the Spotify support site. The page carries no publication date or revision date. It shows only a "© 2026 Spotify AB" footer, so it is not possible to say from the page when the QR code section was added or whether it replaced earlier wording.

The second is a report published today, October 19, 2026, at 11:15 am Pacific Time by Ben Schoon, a senior editor at 9to5Google, under the headline "Spotify's 'QR code verification' cracks down on sharing and could ban you for a year." According to 9to5Google, the method was "spotted" by users on Reddit, and the report links to a thread in the r/truespotify community titled "spotify family plan crackdown." The report links directly to the same Spotify support page.

Spotify has not, in either document, published a blog post, a press release or a list of markets. Its support page says only: "We may ask some Premium Family members to verify they live with the plan manager by scanning a QR code." The word "some" is doing a lot of work. Neither source says how members are selected, how many have been asked, or which countries are included.

How the QR code check works

Spotify's instructions are short. The support page sets out three steps:

The plan manager opens the QR code on their phone. Find it by tapping your profile picture, then Your Premium, then Manage.The plan member scans the QR code with their phone camera.Both the manager and member need to be in the same place to complete the scan.

According to Spotify, "QR code verification can only be done in the mobile app," and both people need the latest version installed. The desktop app and web player are therefore out. The page gives members "7 days to complete the QR code scan after getting the notification."

The technical detail that matters most sits in the troubleshooting section, not the instructions. Spotify tells users to make sure they are "scanning the code in person, as it changes every few seconds." The same section says to "check that the time and date are correct on both devices," which suggests the code is time-based and validated against the clock on each phone. Spotify does not describe the mechanism further, and the page does not say whether the scan transmits any device or network information beyond the code itself.

A rotating code is designed to defeat the obvious workaround. According to 9to5Google, that "makes it harder for a screenshot of the page to be used to complete the process." The report adds, however, that "some quickly found that using multiple devices and video calls, though, they could work around the process." The 9to5Google report describes the method as "not particularly hard to work around" in its opening sentence and later calls it "significantly harder to get around" than the address checks Spotify used before. Both statements are 9to5Google's assessment; Spotify's page does not comment on workarounds beyond the instruction to scan in person.

What happens to members who miss the window

This is where the two sources diverge, and the divergence is not trivial.

Spotify's QR code section lists two consequences for a member who "misses the window or can't complete verification":

They can't join a different Family or Duo plan for 12 months

They can choose a different plan at www.spotify.com/premium

That is all. The QR code section does not say the member loses Premium, does not say the member is moved to the free tier, and does not say whether the member can stay on, or return to, the same Family plan.

9to5Google goes further. According to the report, members who miss the QR code window are "automatically pushed down to the free plan as soon as the window closes," and "can still sign up for their own Individual plan." The first of those claims does not appear in Spotify's QR code section. It does match what Spotify says about a different check on the same page, the address verification, which may be where the report drew it from. The second is a narrower reading of Spotify's "choose a different plan," which on its face could also include Student or other tiers.

The address verification rules, set out higher up the same page, are more complete. According to Spotify, if it cannot confirm a member's address it emails them, and the member must enter their full address "within 7 days of getting the email." If that succeeds, "the account stays on Premium Family." If it fails or the member misses the window, "the member loses access to the plan and switches to the free version." Then comes a clause that the QR code section lacks: "They can join the same Family or Duo plan again, but can't join any other Family or Duo plan for 12 months from the date verification failed."

So under the address check, a member who fails can rejoin the household they claimed to belong to. Under the QR code check, Spotify's page is silent on that. Whether the two processes share the same downstream rules, as 9to5Google's statement that "the same 12-month sharing ban is imposed on address checks" implies, is not confirmed by Spotify's wording. Readers of the support page are left to infer it.

There is also a small mismatch on timing. Spotify starts the 7-day clock "after getting the notification." 9to5Google describes it as the window "between when the QR code prompt first appears" and completion. Those may be the same moment, but if a notification arrives while the app is closed, they may not be.

The Duo plan question

Spotify's QR code section mentions only "Premium Family members." Yet the penalty extends to Duo, the two-person plan, which members cannot join for 12 months after a failed check. The support page does not say whether Duo subscribers themselves are subject to QR code checks. Its sidebar lists Premium Duo as a separate category, and the address verification text also refers to "the same Family or Duo plan," so Duo appears to be covered by the address rules at least.

Location data and privacy

On address verification, Spotify makes one explicit privacy statement: "We don't track your location. We only check your address to verify."

That sentence appears in the address section, not the QR code section, and it sits uneasily next to a process whose explicit purpose is to establish that two phones are physically in the same place. Spotify does not say that the QR code check uses GPS, Wi-Fi or IP address data, and the troubleshooting tips point only to clocks and app versions. But it also does not say that it does not. Neither the support page nor the 9to5Google report addresses what data the scan records, how long it is kept, or whether it feeds anything other than the verification decision.

Some of the mechanics around addresses are more precise. According to Spotify, the plan manager can check and change the household address on their Family plan settings page, and "you can only select an address in the same country where your payment method was issued." If an address does not autocomplete, Spotify says to enter it in full and select Find; if it still cannot be found, the page suggests choosing a building, street name or "a close public space or building," adding: "Just don't use someone else's address."

Spotify asks members to verify their full address at three points, according to the page: when they join, when the manager changes address, and "if we can't confirm their address." The QR code check is described as an additional method that Spotify "may" apply, not a replacement.

The co-location problem is not hypothetical for genuine households. One reader comment captured beneath the 9to5Google report put it this way: "So if a family member goes on holiday without the plan manager for more than 7 days they are stuffed." Spotify's page offers no route for members who are temporarily away, such as students living elsewhere during term or family members travelling, and it does not describe an appeal process.

The household rule behind it

None of this changes who is eligible. According to 9to5Google, "Spotify's Family plan terms require users to live in the same household," and the report links to Spotify's Premium Family terms. What has changed is enforcement. An address typed into a form is easy to borrow; a code that refreshes every few seconds on someone else's phone is not, at least without a second device and a video call.

The commercial logic is visible in the price gap. When Spotify raised UK prices in October 2025, Premium Individual went from £11.99 to £12.99 a month and Premium Family from £19.99 to £21.99. On those figures, by PPC Land's own calculation, a Family plan costs £9.00 a month more than a single Individual subscription while covering several accounts. Every account that sits on a Family plan without living at the address is, from Spotify's perspective, an Individual subscription not being paid for. That increase followed price rises across multiple global markets in August 2025, when the monthly Premium price moved from €10.99 to €11.99.

Streaming services have spent several years tightening account sharing, a trend 9to5Google describes as having "become very common in the world of streaming subscriptions." Spotify's version is narrower than some, since it targets the household-plan discount rather than password sharing on a single account.

Why this matters for advertisers

Spotify runs a freemium model, and a Family member who is removed from the plan does not disappear from the service. Under Spotify's own address rules, that member "switches to the free version," which means ads. If the QR code check has the same outcome, as 9to5Google reports, every failed verification converts a paying, ad-free listener into ad-supported inventory, unless the person pays for a plan of their own.

The scale of that ad-supported audience is already large. Spotify reported 494 million ad-supported users in Q2 2026, up 14% year over year, alongside 300 million Premium subscribers and 777 million monthly active users. Ad-supported revenue for the quarter was €446 million, up 1% reported. In Q1 2026, Spotify reported 761 million users and €4.148 billion in Premium revenue, against €385 million from advertising. Subscriptions are, by a wide margin, the larger business, which explains why the company would accept some churn on Family plans to convert sharers into full-price subscribers.

For buyers of Spotify inventory, the effect depends on numbers Spotify has not disclosed: how many Family seats are shared outside households, how many members will be asked to verify, and how many of those who fail will pay rather than drop to free. A wave of new free-tier listeners would arrive with listening habits formed on Premium, which may matter for engagement metrics. It would also coincide with the ad business Spotify has been rebuilding. At its 2026 Investor Day in May, the company outlined an advertising operation built on premium sponsorships and automated programmatic channels, and by Q2 2026 automated channels accounted for nearly 40% of ad-supported revenue, with 33,000 active advertisers.

Family plan rules also intersect with other parts of the product. Managed accounts for children were originally a Premium Family feature; in May 2026 Spotify opened managed accounts to free-tier families in Argentina, Colombia, Denmark, Italy, New Zealand and Sweden, with ads. Spotify's support sidebar still lists managed accounts and Spotify Kids under the Family plan category, and the verification page does not say whether managed accounts on a Family plan are subject to the QR code check.

What is still unknown

Several questions are left open by both documents:

  • Markets. The support page captured is the US edition. Neither source says where QR code checks are active or when they started.
  • Selection. Spotify says it "may ask some" members. The criteria are not published, and it is not clear whether the check is triggered by the same signals that prompt an address reverification.
  • Loss of Premium. Spotify's QR code section does not say members lose Premium or move to the free tier. 9to5Google says they do.
  • Rejoining. The address rules allow a member to rejoin the same Family or Duo plan; the QR code rules do not mention it.
  • Data. Spotify says it does not track location for address checks. It says nothing either way about what the QR code scan collects.

Spotify's page ends its QR code section with troubleshooting tips rather than answers to any of these. Until it publishes more, the clearest statement of the rules remains a two-line list: no other Family or Duo plan for 12 months, and a link to the Premium page.

Timeline

Summary

Who: Spotify, its Premium Family plan managers and members, and, indirectly, advertisers buying Spotify's ad-supported inventory. The rollout was reported by Ben Schoon of 9to5Google, citing Reddit users.

What: Spotify may ask some Premium Family members to verify they live with the plan manager by scanning a QR code on the manager's phone, in the same place, using a code that changes every few seconds. Members who miss the 7-day window or fail cannot join a different Family or Duo plan for 12 months, according to Spotify. 9to5Google says they also drop to the free tier; Spotify's QR code section does not say so, though its address verification rules do.

When: 9to5Google reported the rollout today, October 19, 2026. Spotify's support page is undated.

Where: The support page captured is the US edition of Spotify's help site. Neither source names the markets where QR code checks are active.

Why: Spotify's Family plan terms require members to live in the same household, and address-based checks could be satisfied with a borrowed address. The QR code adds a test of physical presence. With Premium revenue far larger than ad revenue, enforcing the household rule turns shared seats into either new subscriptions or new ad-supported listeners.