We have a functionality that allows to block the capture of the QR code (login in an Access Point) filtering by email and phone number.
There is a list where you add the emails and/or phone numbers that do have permission to access, only the users (email/phone number) that appear in this list can capture the QR code in the expected way.