FBI Alerts Avoid QR Code Scam Stay Safe Now

FBI Alerts Avoid QR Code Scam Stay Safe Now

FBI Alerts on QR Code Scams Involving Unsolicited Packages

The Federal Bureau of Investigation has issued a stern warning about a new cyber‑fraud tactic that relies on QR codes on parcels people never ordered. The scheme can trick recipients into sharing sensitive financial details or downloading malicious software.

How the Scam Works

  • Scammers send a package to a random address.
  • Inside the parcel is a QR code that appears to be harmless.
  • When scanned, the code directs the user to a site that may ask for bank login credentials or prompt the download of malware.

Connection to the Brushing Scam

The FBI described this as a variation of the classic brushing scam, where online sellers ship goods to unsuspecting recipients and then use the recipient’s name to post fake positive reviews. In the latest form, vendors add QR codes that facilitate direct financial exploitation instead of just boosting ratings.

Key Takeaways for the Public
  • Be suspicious of any package you did not order.
  • Avoid scanning QR codes from unknown or unsolicited sources.
  • When scanning a QR code with a phone camera, carefully read the displayed URL before clicking “open.”
  • If a QR code appears on an unsolicited package, simply ignore it.
Broader Trend of QR Code Fraud

Criminals are increasingly using QR codes in everyday situations—such as parking meters in New York City—to prompt users for credit card information. Because QR codes are common on phones and other devices, the risk of accidental exposure grows. Staying vigilant and doubting unfamiliar codes helps protect against this evolving threat.