If an unexpected package shows up at your door, you may want to think twice before scanning a QR code or clicking on anything inside.
Federal officials are warning consumers about a scam known as a “brushing” scam, which involves thieves sending unsolicited packages to people in an effort to steal personal or financial information.
The packages may appear to come from well-known companies such as Amazon or eBay, or from businesses consumers may not recognize.
Inside could be an inexpensive item, such as a skin-care or hair-care product.
But the package itself may not be the real threat.
How the brushing scam works
The unexpected package may contain a QR code, link or note encouraging you to scan the code or visit a website.
That website could be designed to look legitimate but actually be a phishing site created to steal information you enter, including personal or financial details.
Clicking on links or scanning QR codes associated with the package could also expose your device to malware.
The Better Business Bureau says brushing scams are becoming increasingly common and is offering consumers several ways to protect themselves.
How to protect yourself from a brushing scam
If you receive a package you never ordered, experts recommend:
- Don’t scan the QR code or click on any links included with the package.
- Change passwords for your online shopping accounts, particularly accounts such as Amazon or Temu.
- If the package appears to have come from a legitimate company, notify the company so it can investigate potential fraud involving your account or information.
- Don’t try to return the unsolicited merchandise. Experts warn that attempting to return the package could create additional opportunities for scammers to obtain your information.
Can you keep the package?
According to the Federal Trade Commission, consumers generally have the right to keep merchandise they receive that they did not order.
The FTC says consumers are not required to pay for or return unordered merchandise.
If you receive an unexpected package, the safest approach is to avoid interacting with any QR codes, links or instructions included with it and check your online shopping accounts for suspicious activity.
Consumers who believe their personal or financial information may have been compromised should take steps to secure their accounts and report suspected fraud.
More Stories Like This In Our Email Newsletter
