Somebody photographed the QR code

There is a small red metal box bolted to a lamppost near you. There is almost certainly more than one.

You have walked past hundreds of them. They are called ตู้แดง — red boxes — and they are one of the more quietly clever pieces of public administration in this country.

Inside each is a card. A patrolling police officer opens the box and signs it, and the signature is the proof that a human being stood on that spot at that hour.

That’s it. That’s the whole device.

The scale, which nobody outside Thailand knows

There are 1,482 police stations in Thailand, and each operates at least thirty red boxes.

That is upwards of 44,000 verification points, sited at what the police designate as risk locations — shophouse rows, quiet sois, ATMs, the backs of schools, the entrances to housing estates.

The whole network cost ฿11.1 million to buy and install.

Work that out per unit and it is around ฿250 a box. For a national accountability system covering forty-four thousand physical locations.

I’ve written a lot on this site about Thai public administration failing to build things. This is the opposite and it deserves saying plainly: this is an extremely cheap system that does something genuinely difficult. Verifying that a specific person was in a specific place at a specific time is hard, and a locked box with a card in it does it for the price of a bowl of noodles.

Then they improved it

From around 2018, with a Bangkok station as the pilot, the boxes were upgraded. A QR code went inside, and officers began scanning it with the Royal Thai Police 4.0 app rather than signing the card. The scan is timestamped, uploaded, and visible to a supervisor immediately.

Every part of that is an improvement on paper. No lost cards, no illegible signatures, no waiting for a sergeant to physically collect the books, real-time oversight of an entire patrol area from a desk.

And then somebody photographed the QR code.

Thai reporting records exactly this: officers taking a picture of the code, and scanning the photograph from home.

Why that’s the whole article

Sit with what the two systems actually prove, because they are not the same claim.

A signature in a locked box proves a body was there, holding a pen. To fake it you must physically travel to the box, open it, and forge a signature — at which point you have done most of the work of actually patrolling, and you are standing exactly where you were supposed to be standing.

A QR scan proves that a phone was pointed at that code. The code doesn’t move, doesn’t change, and — crucially — photographs perfectly.

The upgrade did not make the system harder to cheat. It made cheating cheaper, because it converted a task requiring physical presence into one requiring a single visit and a saved image.

A static QR code is not a verification of presence. It is a password printed on a wall, and passwords printed on walls get copied.

And then GPS

The response has been real-time GPS tracking, brought in by the Crime Suppression Division and trialled in Bangkok as a replacement for the boxes.

Which closes that particular hole and opens a different one. GPS proves a phone was there.

Follow the chain and it moves in one direction the whole way:

The card proved a body was there. The QR code proved a phone had been there once. GPS proves a phone is there now.

Each layer of technology verifies something further from the thing anyone actually wants verified, which is that a person stood on that corner and looked at it.

The signature was the strongest evidence in the sequence, and it is the one being retired. I don’t think that was anybody’s intention and I’m fairly confident it’s what happened.

The part I couldn’t resolve

Here is a thread I can see clearly in Thai public discussion and could not establish the truth of, so I’m going to describe the question rather than answer it.

Thai discussion includes people asking why installing a red box at your own property costs money — figures in the low thousands of baht are mentioned — and Thai accounting forums carry questions about how to treat red box expenditure. So money changes hands somewhere in the process of getting a box put on your wall.

What I could not establish is what that money is. It may be straightforwardly the cost of manufacturing and mounting the hardware, which someone has to pay for and which the ฿11.1 million national figure would not cover for a private address. It may be something else. I have no evidence either way and I’m not going to imply one, particularly given how easily that sort of implication travels.

But the structural question stands regardless of the answer, and it’s this site’s recurring one:

If having a red box at your address means a patrol comes to your address, and getting one installed costs money, then police attention has a price. Not a bribe — possibly a perfectly legitimate hardware charge. It would still mean the well-resourced street gets more verified patrols than the poor one, which is article 89’s finding arriving in policing: the protection attaches to whoever could already arrange it.

Somebody with access to the Royal Thai Police procurement rules could answer this in an afternoon, and it is the single most useful piece of reporting anyone could do on this subject.

What the box is actually for

One thing worth saying, because it’s easy to read all this as a piece about cheating.

The red box is not primarily aimed at criminals. It is aimed at the patrol officer, and the person it reassures is the resident.

A box on your wall is a visible, physical statement that this address is on a route. It is legible to a would-be burglar, to a returning homeowner at 2am, and to a supervisor. The deterrent and the audit trail are the same object, which is unusually economical design.

Thai households have understood this for decades, which is why people ask for them. You are not buying surveillance. You are buying the certainty that somebody is required to come.

Common misconceptions

“They’re fire alarm boxes / electrical boxes.” They’re police patrol verification points. Open one and there’s a card or a QR code inside.

“They’re obsolete.” Upwards of 44,000 are in service, and QR-based scanning is the current national system.

“The QR code fixed the accountability problem.” It moved it. Thai reporting documents officers photographing the code and scanning the image remotely.

“GPS solves it.” GPS tracks a phone. So did the QR code. Neither tracks a person’s attention.

“They’re just for show.” At roughly ฿250 a unit, this is among the cheapest functioning accountability systems in Thai public administration, and it worked well for a long time in its analogue form.