This requirement will kick in the moment the system suspects suspicious activity. At that point, reCAPTCHA will forgo the old image puzzles and require you to scan a QR code with your smartphone to prove you’re human.

Any random QR code?

What if I don't have a QR code available?

This sounds like an assumption that people will have something available that isn't necessarily accurate a significant amount of the time.