Jan 27, 2025 | posted by Lily Chavez
So, you receive an unexpected package and feel like a surprise gift. This mysterious package arrives with your name on it and contains a gift. However, you don’t remember ordering anything or hearing about the gift from anyone. But then, you notice a QR code attached to the package and wonder if you should scan it. What could go wrong?
This situation might be a form of a “brushing scam.” In a brushing scam, an unknown seller ships an item to you, usually something of low value, and even provides a fake tracking number. The goal is to trick you into thinking you bought something and to encourage you to take action by scanning the QR code provided by the scammer.
These scammers can use QR codes to direct victims to phishing websites or malicious sites designed to steal personal information. Scanning the QR code could unknowingly expose sensitive data like usernames, passwords, or credit card numbers. Worse, scanning the code might download malware onto your phone, giving hackers remote access to your device.
Here are the red flags to watch out for:
If you receive a package that you weren’t expecting, there are a few key signs that could indicate a scam:
- No Sender Information: Legitimate packages usually have some indication of who the sender is. If the package doesn’t include details like the name or company of the sender, it could be suspicious.
- A QR Code That Feels Suspicious: Be cautious of QR codes from unknown sources. Always question whether it’s safe to scan a code when you don’t know where it’s from.
- Unsolicited Gifts: If you didn’t order something and no one you know is sending you a gift, it’s worth questioning why you’re receiving a package at all.
If you’ve scanned the QR code and entered sensitive information, act quickly. Change your passwords to strong, unique ones and enable two-factor authentication for added security. Check your credit report for unfamiliar accounts or inquiries and review your bank statements for suspicious transactions. Contact your bank if you notice anything unusual.
You can also report the situation to the FTC at ReportFraud.ftc.gov.
Go back to news feed.