Investigators Warn QR Code Package Scams Can Steal Personal Data as Empty Envelopes Fuel Fake Reviews
Updated
Updated · Fox News · Jun 27
Investigators Warn QR Code Package Scams Can Steal Personal Data as Empty Envelopes Fuel Fake Reviews
1 articles · Updated · Fox News · Jun 27
Summary
Consumer groups say mystery packages and even empty envelopes can be part of a brushing scam that uses your name and address to fake a delivered order.
A QR code inside makes the scheme riskier by pushing recipients to phishing sites that can capture logins, card details, bank information or one-time verification codes.
Scammers typically need only a real address and tracking number—often sourced from data brokers, public records or old breaches—to post bogus "verified buyer" reviews and boost seller ratings.
Recipients are urged not to scan codes or call numbers in the package, but instead check shopping and financial accounts, change passwords, enable 2FA and monitor statements and credit reports.
Anyone who already entered data after scanning should secure affected accounts, delete any installed app, run a device security scan and report the incident to IC3, the FTC or postal inspectors.