Imagine getting a package at your doorstep that you didn’t order. There’s no return address, no sender information — just a mystery box and a QR code printed on or inside it.
You might be curious enough to scan it.
That’s exactly what scammers are counting on.
How the Scam Works
The FBI warns that criminals are now sending unsolicited packages containing QR codes as part of a growing fraud trend.
This is a twist on the “brushing scam” — where online sellers send you items you never ordered so they can use your name to post fake positive reviews. But now, scammers have taken it a step further by adding QR codes that:
- Steal personal and financial information when scanned
- Install malicious software on your phone or device
- Redirect you to fake websites that capture your data
Because there’s no sender information, the mystery package is meant to spark your curiosity — making you more likely to scan the QR code without thinking.
How to Protect Yourself
Scammers are constantly updating their tricks, but you can protect yourself by following these safety tips:
- Be suspicious of packages you didn’t order — especially if they have no sender information.
- Never scan QR codes from unknown sources — whether they arrive by package, email, text, or flyer.
- Check permissions before allowing an app or website access to your phone.
- Secure your online accounts — change your passwords and request a free credit report if you think your info has been compromised.
If you believe you’ve been targeted:
- File a report with the FBI’s Internet Crime Complaint Center at www.ic3.gov.
- If you’re age 60+, you can call the DOJ Elder Justice Hotline at 1-833-FRAUD-11 for assistance.
How PC Matic Can Help
While PC Matic can’t stop a suspicious package from arriving, it can protect you if you accidentally scan a malicious QR code or click a dangerous link.
With real-time antivirus, ad and scam blocking, and malware prevention built in, PC Matic helps stop cybercriminals from stealing your personal information. Our U.S.-based support team is always here to help if you think you’ve been targeted by a scam.
Bottom line: If you didn’t order it, don’t trust it — and never scan QR codes from unknown sources. Scammers are banking on your curiosity. Don’t give them the win.
