“Don’t look a gift horse in the mouth” is a go-to saying when you receive something for free. However, if you get a package addressed to you with a QR code asking you to find out who sent it or with instructions on how to return it, stop before you scan!
It’s essential to question whether someone meant to send you a gift or if it’s a scam to steal your personal information.
Recommended Videos
If you know the gift is intended for you, keep it. But if you’re unsure, this could be a new twist on a brushing scam designed to steal your valuable personal info.
The Federal Trade Commission is offering the following tips:
How the scam works
The QR code could lead you to a phishing website that prompts you to enter sensitive information, such as credit card numbers or usernames and passwords for important accounts. It might also install malware on your device, giving hackers unfettered access without your knowledge.
If you scan a QR code from an unknown package and enter your credentials, change your password immediately to avoid unauthorized access. Make the new password difficult for hackers to guess and enable two-factor authentication.
Steps to take if hackers access your information
If you believe someone has your personal information, check your free credit report weekly on AnnualCreditReport.com and look for signs of identity theft. You can freeze your accounts or place a fraud alert on your credit report.
Regularly update your computer and phone software for the latest security patches.
Report any identity theft to the Federal Trade Commission by visiting IdentityTheft.gov.
What to do with the package
Regarding the package, you don’t need to return any unordered merchandise and are legally entitled to keep it as a gift.
