How Event Ticketing Works: Checkout to Door Scan

Buying a ticket to a show feels like one action: you tap a button, you get an email, you show a code at the door. Underneath, it is a chain of separate steps, and almost every ticketing complaint people have — the fee they did not expect, the QR that would not scan, the friend who never got the transfer — traces back to one specific link in that chain.

Here is what actually happens, in order.

1. The ticket exists before anyone buys it

Before a single sale, the promoter defines ticket tiers: named buckets of inventory, each with its own price, quantity, and sale window. Early bird, general admission, VIP, table service. A tier is not a discount code. It is a fixed allocation, and when its quantity is gone, that tier closes whether or not the event is sold out.

This is why "the price went up" is usually not a price change at all. The cheaper tier sold out and the next one opened. Tiers can also be scheduled, so a tier may appear or disappear at a set time without anyone touching it.

2. Checkout places a hold, not just a charge

When you start checkout, a well-built platform locks the inventory rows for the tiers in your cart before it does anything else. That lock is what prevents overselling when forty people hit the same last ten tickets at once. Your tickets are reserved for the length of the checkout, then either confirmed or released.

This is also the moment the fee is calculated. There are two ways platforms present it:

• Layered fees: a service fee, then a separate payment processing fee, sometimes a facility or delivery fee on top. The number at the top of the page is not the number you pay.
• All-in fees: one fee that already includes card processing. The checkout total is the real total.

If you are a buyer, the useful habit is to compare the final total across platforms rather than the face value. If you are a promoter, the fee structure decides whether your advertised price is the price your audience remembers paying.

3. What you receive is a signed code, not a picture

The QR code in your confirmation email is not a random image. It encodes a ticket identifier along with a cryptographic signature generated with a secret key that only the platform holds. At the door, the scanner recomputes that signature and compares it.

Two consequences follow, and they explain most door-line drama:

• A screenshot of a real ticket is still a real ticket. The signature does not care whether the image came from an email or a photo of a friend's phone. What stops duplicates is not the code, it is the check-in record.
• A fabricated code fails instantly. Without the secret key, you cannot produce a signature that validates, so a forged QR is rejected before anyone looks at a guest list.

The first scan marks the ticket as checked in. The second scan of the same code shows the scanner that it has already been used, along with when. That is the actual anti-duplication mechanism, which is why the person who arrives second in a screenshot-sharing situation is the one who has a problem.

4. Transfers are the correct way to hand off a ticket

Screenshotting a QR to a friend works right up until it does not. A proper transfer reassigns the ticket to a new holder and invalidates the original code, so there is exactly one live ticket at any moment.

Transfers matter to promoters for a reason that has nothing to do with fraud: the transfer is the only way to learn who is actually attending. If four tickets on one order get screenshotted out to four people, the promoter has one buyer record and no idea who walked in. If those tickets are transferred, there are four attendee records and four people who can be invited to the next event.

5. The door does three checks, not one

Scanning is the visible part. Door staff are usually running three checks at once:

• Validity: is the signature good and the ticket unused?
• List status: is this person on a guest list, comp list, or artist list instead of a paid ticket? These are separate records from ticket sales and are checked by name.
• Age: for 18+ and 21+ events, ID is verified independently of the ticket. Many scanners parse the PDF417 barcode on the back of a driver's license, which reads the encoded date of birth rather than relying on someone's arithmetic at 1am.

A valid ticket does not override an age restriction. If an event is 21+, a 20-year-old with a legitimately purchased ticket is not getting in, and the refund question goes to the promoter, not the platform.

6. When something goes wrong

The single most useful thing to know: your order confirmation email is the durable record. Not the QR image saved to your camera roll, not the browser tab. If your phone dies or the code will not render, the confirmation and the email address you bought with are enough for door staff to find your ticket in the attendee list.

On refunds, one distinction is worth internalizing. Ticket face value belongs to the promoter and is refunded by the promoter under whatever policy the event set. Platform service fees are frequently non-refundable, including on cancellation, because the platform already paid card processing on the transaction. Read the event's refund terms before assuming a cancelled show means a full return of what you paid.

The short version

A ticket is an allocation from a tier, held by a database lock at checkout, delivered as a signed code, made single-use by a check-in record, moved safely only by transfer, and validated at the door alongside a list check and an ID check. Every one of those is a separate system, and knowing which one you are arguing with saves a lot of time — at the door and in your inbox the next morning.