The Federal Trade Commission is warning Americans about a new scam that starts right at your front door.
According to a recent alert from the FTC, the scam begins with fraudsters sending a mysterious package that contains a QR code to random recipients. And while that seems harmless enough, those square-shaped barcodes can direct people to whatever website the creator of the code wants — and sometimes those websites are trying to steal your personal information.
Must Read
- Thanks to Jeff Bezos, you can now become a landlord for as little as $100 — and no, you don’t have to deal with tenants or fix freezers. Here’s how
- I’m 49 years old and have nothing saved for retirement — what should I do? Don’t panic. Here are 6 of the easiest ways you can catch up (and fast)
- Dave Ramsey warns nearly 50% of Americans are making 1 big Social Security mistake — here’s what it is and 3 simple steps to fix it ASAP
According to NordVPN, 73% of Americans report scanning QR codes without verifying their source, with 26 million having already been directed to malicious sites that aim to steal their information or take control of their devices.
How does this QR scam work?
This scheme is essentially a high-tech twist on the old brushing scam, where scammers or sellers of knock-off goods send you unsolicited packages — often containing low-value items or random trinkets — so that they can use your personal information to create fake online reviews. These fake reviews can potentially boost sales for the product(s) that the package recipient received.
The QR scam takes it one step further by adding a malicious code into the mix. Here’s the play-by-play:
- The package: A random package shows up at your door. You didn’t order it, but it looks legitimate enough — complete with shipping labels and packaging that mimics major retailers
- The “mystery gift” note: Inside, there’s often a vague note claiming the package is a gift from a secret admirer, or instructions saying you need to scan the included QR code to “confirm delivery” or “return the item”
- The bait: Scammers are banking on your curiosity or desire to send the item back. And as we learned above, many Americans have admitted to scanning mysterious QR codes
- The switch: Instead of sending you to a legitimate retailer’s website, the QR code takes you to a fake website designed to steal personal information — like credit card info or login credentials. In some cases, simply scanning the QR code can trigger a malware download, allowing criminals to access your phone’s data, email, contacts and stored passwords
Essentially, the scammers are betting on you being curious enough to scan the QR code, allowing them to wreak havoc on your life — and maybe even your finances.
Read more: Robert Kiyosaki warns of a ‘Greater Depression’ coming to the US — with millions of Americans going poor. But he says these 2 ‘easy-money’ assets will bring in ‘great wealth’. How to get in now
How to protect yourself from becoming a victim
If you receive a package that you didn’t order, especially one without a clear sender, you’d be wise to exercise extreme caution. Here’s how to protect yourself in this situation:
- Look for sender info: Legitimate packages should have a clearly listed sender on the outside or a packing slip on the inside. If that is missing or looks suspicious, it could be a red flag that something is off
- Don’t scan mystery QR codes: If you don’t know where a QR code is from, don’t scan it — no matter how curious you might be
- Stop before you provide info: If you do scan the QR code, don’t blindly give out your information or give access to your camera, photos or location
- Disconnect your device from the Internet: If you scan the code and suspect you’ve been scammed, turn your device’s internet connection off. This can stop the malware from sending information back to the scammers
- Lock down your accounts: If you suspect it’s a scam, change the passwords for all of your major accounts — such as your email, as well as your banking accounts — and set up two-factor authentication on any account that offers it. If you notice any suspicious purchases on your banking accounts, contact your bank or credit card company immediately
- Report the scam: If you’ve been scammed, file a complaint with the Internet Crime Complaint Center and contact your local consumer protection agency
The best way to protect yourself from this type of scam is simple — be very cautious before scanning QR codes. Sometimes, satisfying your curiosity just isn’t worth the risk.
What to read next
- The ‘Oracle of Wall Street’ who predicted 2008 crash sees trouble in US housing — and says boomers aren’t as rich as many think. Why that’s a problem
- There’s still a 35% chance of a recession hitting the American economy this year — protect your retirement savings with these 5 essential money moves ASAP
- This tiny hot Costco item has skyrocketed 74% in price in under 2 years — but now the retail giant is restricting purchase. Here’s how to buy the coveted asset in bulk
- Want an extra $1,300,000 when you retire? Dave Ramsey says this 7-step plan ‘works every single time’ to kill debt, get rich in America — and that ‘anyone’ can do it
Join 200,000+ readers and get Moneywise’s best stories and exclusive interviews first — clear insights curated and delivered weekly. Subscribe now.
This article provides information only and should not be construed as advice. It is provided without warranty of any kind.