Who among us hasn't felt a thrill at finding an unexpected package on the porch?
It’s the grown-up version of waking up to presents — except now the present might be a tiny paper rectangle with a QR code that wants to be your new best friend.
The FBI, however, is not amused.
In a written statement, the agency warned about an alarming new twist on the classic “brushing scam”: unsolicited parcels that encourage recipients to scan QR codes which then push them toward fraud or malware.
What used to be a murky corner of online retail — shady sellers sending goods to random addresses to post fake positive reviews — now comes with a side of cyber trickery.
“In this variation, scam actors have incorporated the use of QR codes on packages to facilitate financial fraud activities,” the FBI said.
Translation: someone ships you a mystery tchotchke, puts a QR on it that screams “scan me,” and your phone becomes a slightly embarrassed accomplice.
How the scam works (spoiler: your curiosity does the heavy lifting)
• Step 1: You receive a package you never ordered. There’s no return address because honesty would be inconvenient.
• Step 2: The package includes a QR code with a friendly prompt — “See your surprise!” or “Verify delivery.” It’s literally bait with ink on it.
• Step 3: You scan. The website you’re whisked to looks legit-ish (the exact technical term is “convincingly fake”). It may ask for personal or financial information or prompt you to download an app or file.
• Step 4: Your data takes a short vacation without you. Or worse, malware settles into your phone like a bad houseguest.
Why QR codes?
Because they’re neat, tiny, and most people don’t pause long enough to think, “Wait — why is a random gum-wrapper-sized barcode trying to be part of my life?”
The FBI’s advice — written in plain, responsible language — is worth repeating verbatim for those of us who embraced QR-based coffee shop menus during the pandemic and never looked back:
• Do not scan QR codes from unknown origins.
• Be suspicious of any package you receive that you didn’t order.
• Be wary of packages that lack sender information.
• Carefully review what permissions you grant to websites or apps accessed through a QR code.
• If you suspect you’ve been targeted in a brushing scam, change your account login credentials and request a free credit report from Equifax, Experian, or TransUnion to monitor for fraudulent activity.
If you think you’re a victim (or your cousin’s neighbor’s aunt scanned something and is panicking), report it to the FBI’s Internet Crime Complaint Center at www.ic3.gov.
And for older adults who need help filing a complaint, the DOJ Elder Justice Hotline is available at 1-833-FRAUD-11 (1-833-372-8311).
Practical steps that aren’t boring
• Treat every unsolicited QR like a suspiciously enthusiastic door-to-door salesman.
• If curiosity is finally winning, open your phone camera—don’t install apps—and preview the URL. If it looks weird, don’t proceed.
• Use a QR scanner app that previews links (some browsers show previews too), and never hand over passwords or Social Security numbers for a “freebie.”
• Keep phone OS and security apps updated — they’re less dramatic than a superhero but sometimes just as effective.
Yes, this is a little dystopian: packages as the Trojan horses of the modern era...
But the answer isn’t paranoia — it’s a little caution, a splash of skepticism, and a refusal to let your porch be a recruitment center for digital scammers.
That mystery package might have been meant as a thrill; don’t let it become a bill!!
Surprise! It’s a Brushing Scam—Next Up: Free Socks and Identity Theft!
“No paywall. No puppets. Just local truth. Chip in $3 today” at https://buymeacoffee.com/doublejeopardynews
“Enjoy this content without corporate censorship? Help keep it that way.”
“Ad-Free. Algorithm-Free. 100% Independent. Support now.”
#QRScam #BrushingScam #FBIAlert #IC3 #ScanWithCaution #PorchPirates #DigitalSafety #PhoneSecurity #ElderJustice #FraudPrevention #DontScanUnknown #PackageScam #CyberHygiene #ReportFraud #StaySuspicious
Comments
Post a Comment