DM would definitely work. I would think QR does too, but would be difficult to claim on mobile and I'd imagine it wouldn't be hard to create a workaround for a bot.