BOPIS done right: the 30-second pickup code

Buy-online-pickup-in-store — BOPIS — is one of the highest-value things a physical shop can offer. The customer skips shipping, you skip a parcel, and they walk into your store, where the average basket tends to grow. The hard part was never the idea. It was the handoff.

The handoff is the whole problem

Think about what has to be true at the counter for a pickup to be safe:

• The person standing there is the person who placed the order.
• The order is paid and ready.
• Your staff can confirm both in seconds, while a queue forms behind them.

The common workarounds all leak somewhere. A name and order number can be read off a confirmation email by anyone holding the phone — or anyone who can guess a sequential number. A printed slip gets lost, or handed to the wrong customer. “What name was it under?” is not a security check; it is an honour system.

A code that expires before it can be shared

MyShopie’s pickup handoff uses a TOTP QR code that rotates every 30 seconds — the same time-based one-time-password idea that secures two-factor login, applied to the counter.

Here is what that means in practice:

1. The customer opens their order in MyShopie. It shows a QR code that regenerates on a 30-second cycle.
2. At the counter, your staff scan it. The code is only valid inside its short window, so a screenshot taken yesterday — or forwarded to someone else — simply will not match.
3. A valid scan confirms this order, this customer, right now. Staff hand over the goods and the pickup is closed out against the order.

Because the proof is time-bound, there is nothing durable to steal, guess, or pass around. The customer does not need to remember an order number, and your team does not have to play detective.

Why it belongs in the platform, not bolted on

You could, in principle, wire a pickup flow together from separate tools. But a secure handoff has to sit on top of the order and the inventory — it needs to know the order is paid, mark the stock as collected at that location, and record who handed it over. When pickup is a bolted-on app talking to a separate POS, those facts drift apart, and “collected” in one system means “still reserved” in another.

In MyShopie, pickup is part of the same platform as the online store, the POS, and multi-location inventory. The order, the payment, the stock movement, and the handoff are one chain of events — so the audit trail is complete and the shelf count is honest the moment the customer walks out.

What to check before you turn it on

If you are rolling out pickup, a short readiness list goes a long way:

• Signage at the counter so customers know where to collect and to have their order open on their phone.
• A quick staff run-through of a scan, including the “expired code, ask them to refresh” case.
• A defined pickup point per location so stock is deducted from the right shelf.

Get those three right and BOPIS stops being a support headache and becomes what it should be: a fast, provable handoff that brings online customers through your front door. You can see where it fits alongside the register on the POS & omnichannel page.