It is day two on the floor. Your feet hurt, you have said the same forty second pitch about ninety times, and a friendly person in a branded polo has just asked if they can scan your badge in exchange for a decent water bottle. You say sure, because you have said sure eleven times already and the bottle is genuinely nice. Behind you, someone is setting up a demo laptop and logging into the real system, because that is the only account with data that makes the demo look good.
Nothing dramatic is going to happen at that convention center. Trade shows are not hacker movies. They are enormous, perfectly legal data collection events with a few soft spots around the edges, and the two things most likely to follow you home are your contact record turning up in places you did not expect and a link you scanned without reading. Here is how to work a show without either becoming a headache.
Your Badge Is a Business Card That Never Stops Working
Let us be plain about how badge scanning works, because almost nobody explains it. When a booth scans your badge, they are not reading your phone or your card. They are pulling your registration record. Lead retrieval, the industry term for badge scanning at events, hands the exhibitor the contact information you gave the organizer, and platforms like Cvent’s LeadCapture are built to push that record straight into the exhibitor’s customer relationship management system, meaning the sales database they use to follow up with you.
That is not a breach. That is the product, and you agreed to it at registration. The part worth managing is what happens next. Your record now sits in dozens of sales databases, gets enriched by data vendors, sometimes gets passed to resellers and partners, and produces a long tail of follow up. It also produces very believable phishing, because a message naming the show you actually attended clears your mental filter in a way a random email never would.
- Register with an address you can watch and retire. A dedicated conference email address, or an alias that forwards to you, keeps the list traffic out of your main inbox and tells you where a message came from.
- Use a work phone number, never your personal cell. Whatever number you type at registration is the number that gets dialed for the next two years.
- Decide before you walk the floor whether a scan is worth it. You are trading your contact record for the water bottle. That is a fine trade sometimes. It should be a decision, not a reflex.
- Read the boxes at registration. Most events have an opt out for sponsor list sharing buried in the form, and checking it takes four seconds.
- Take the badge off when you leave the hall. Your name, company, and title on a lanyard at a hotel bar is a free script for anyone who wants to sound like they know you.
QR Codes on Swag, Signs, and Handouts
A QR code, the square pattern you point a camera at, is just a link you cannot read with your eyes. That is the entire issue. At a show they are everywhere, on banners, stickers, tote bags, and flyers stacked on unattended tables, and the mix of hurry and trust on a floor is exactly where nobody checks.
In a 2023 consumer alert, the Federal Trade Commission warned that scammers cover legitimate QR codes with their own stickers and send codes leading to spoofed sites built to capture logins or push malware, meaning software designed to damage a device or steal from it. Its advice holds up well on a show floor.
- Look at the web address before you open it. Your phone previews the link. Read it. A misspelled or unfamiliar domain is the whole tell.
- Never sign in through a scanned code. If a code takes you to a login page for anything real, close it and type the address yourself. That single habit removes most of the risk.
- Be suspicious of loose stickers. A code printed as part of a professional banner is very different from one stuck on top of something.
- Treat every giveaway code as a form. Scan to enter means hand over your contact information. Fine if you meant to.
- Keep your phone updated and multifactor authentication on. Multifactor authentication means a second proof beyond your password, and it is what keeps a stolen password from becoming a stolen account.
The Wi-Fi Named After the Show
Honest calibration first, because this one gets oversold. The Federal Trade Commission’s current consumer guidance says that because most websites now use encryption, connecting through a public Wi-Fi network is usually safe. The old picture of somebody in the corner reading your traffic is mostly out of date.
What still works is simpler. Somebody stands up a network with a believable name, something close enough to the official one that nobody blinks, and puts a sign in page in front of it that asks for a work email and password. Nothing gets intercepted. You just hand over credentials to a convincing form.
- Use your phone’s hotspot for anything that matters. A personal hotspot, meaning your phone sharing its cellular connection, sidesteps the whole question and costs you nothing but battery.
- Ask a staff member for the exact network name. Do not guess from a list where everything looks official.
- Never type a work password into a sign in page for Wi-Fi. Legitimate event networks ask for a code, a room number, or an email. They do not need your password.
- Turn off automatic joining while you travel. Otherwise your laptop reconnects to any network that reuses a name it remembers.
- Bring your own charger instead of using a public charging locker. The Federal Communications Commission publishes guidance on malicious public charging while also saying it is not aware of any confirmed instances, and your own brick makes the question moot.
The Demo Laptop That Touches Nothing Real
This is the one that actually costs companies money, and it is self inflicted. The demo machine gets handed to strangers, left open on a table, and logged in all day in a room full of people. It should not be able to reach anything that matters.
- Demo from a separate account with fake data. A sample company, invented customers, invented numbers. Your real client list is not a sales asset on a show floor.
- Keep it off the company network. No connection into your internal systems, no mapped file shares, no saved passwords in the browser.
- Turn on encryption and a short screen lock. One minute of idle is enough. A booth laptop is the easiest thing in the building to walk off with.
- Never let a prospect drive your production account. If they want hands on time, they get hands on time in the demo environment.
- Wipe and rebuild it when you get back. Whatever got plugged in or clicked during three days on a floor does not need to follow you into the office.
The Bottom Line
Trade shows are worth doing, and none of this should stop you from working a floor hard. Just know that your badge is a data transfer every time it gets scanned, that a QR code is a link you cannot read, that the friendliest network name in the building is not necessarily the official one, and that the demo machine should be a stage prop rather than a door into your business. Handle those four and the only thing following you home is the water bottle.
If your team is heading to a show and you want the demo laptop built right, the accounts separated, and a plan for the follow up flood, we do that for businesses across Denton County. Get in touch at harrisonward.com/contact.
Comments are closed