A method for authorizing a transaction reading out a first code and a second code by means of a first mobile device. The second code contains information items for decrypting the first code. From the read-out codes a first signature confirming the transaction vis-à-vis the system is generated, which is transmitted to the system. Subsequently, an authorization of the transaction is effected.