Use the correct scheme and inspect every field before turning it into a symbol
URL, mail, phone, SMS, Wi-Fi, contact, social, and plain-text payloads follow different conventions. A typo remains a perfectly scannable typo. Avoid embedding secrets or unnecessary personal data because anyone who scans or photographs the symbol can read the content.