A new scam is targeting consumers through unsolicited packages that arrive at their doorstep. These packages often contain QR codes that, when scanned, can lead to malicious websites or prompt users to grant unauthorized access to their devices. The FBI is warning the public to be vigilant against this evolving tactic used by criminals to exploit unsuspecting individuals.
Key Takeaways
- Be cautious of unexpected packages containing items you didn’t order.
- Avoid scanning QR codes from unknown or suspicious origins.
- Never grant phone permissions or access to websites/apps from unsolicited sources.
- If you suspect you’ve been targeted by a "brushing scam," secure your online accounts and check your credit reports.
Understanding the Scam
Criminals are increasingly sophisticated in their methods, and this latest scam involves sending packages to individuals who did not place an order. Attached to these packages, or sometimes inside them, are QR codes. Scanning these codes can be a gateway for scammers to steal personal information, install malware, or gain access to your devices.
This type of scam is often referred to as a "brushing scam," where sellers send products to unsuspecting consumers to artificially inflate their sales and ratings on e-commerce platforms. The inclusion of a malicious QR code adds another layer of risk, potentially leading to identity theft or financial fraud.
How to Protect Yourself
The FBI advises consumers to take several precautions to avoid falling victim to this scam:
- Be Wary of Unsolicited Packages: If a package arrives with merchandise you didn’t order, be suspicious. Especially if there’s no clear sender information.
- Do Not Scan Unknown QR Codes: Treat QR codes found on unexpected packages with extreme caution. Never scan them if their origin is unknown or questionable.
- Guard Your Device Permissions: Be very careful before authorizing any phone permissions or granting access to websites and applications, particularly if prompted by an unknown source.
- Secure Your Online Presence: If you believe you have been targeted by a brushing scam or any related fraudulent activity, it’s crucial to secure your online accounts. Change your passwords and consider requesting a free credit report from major credit reporting agencies to check for any suspicious activity.
Reporting Suspicious Activity
If you encounter a suspicious package or believe you have been targeted by this scam, the FBI encourages you to report it. You can file a complaint with the Internet Crime Complaint Center (IC3) on their website. When reporting, provide as much detail as possible, including:
- The name of any individual or company involved.
- All methods of communication used (websites, emails, phone numbers).
- Details about any applications downloaded or permissions granted on your device.
For assistance with filing a report, you can contact the DOJ Elder Justice Hotline.