Nearly 17 to 18 vulnerable points, including popular tourist spots, have been identified where the QR-code system is strictly enforced.