By Riley Rinehart
Police departments across various states are warning consumers about a growing threat: “brushing scams.” These schemes involve unexpected packages arriving at people’s doorsteps, often containing items they didn’t order, along with a mysterious QR code. The packages typically don’t include any information about the sender, leaving recipients puzzled and concerned. While this might initially seem like a harmless mistake, it’s actually part of a larger scam targeting individuals across the country.
Brushing scams work by sending unrequested packages to victims. These items are typically low-cost, low-quality goods, used solely to create the illusion that the recipient has made an online purchase. This allows scammers to leave positive product reviews under the victim’s name, which can help boost their sales reputation. The package often includes a QR code, leading to a website where the recipient is asked to provide personal information, such as their name, email, phone number, or even credit card details. Once the scammers have this data, they can use it for identity theft, fraud, or other malicious activities.
It’s crucial to note that scanning a QR code by itself doesn’t automatically compromise your personal data. QR codes are simply digital links, and merely scanning them won’t infect your phone or steal your information. The real danger comes when you’re directed to a website and prompted to input personal information. Scammers rely on this step to gather your details, which can then be used to perpetrate fraud or create fake reviews.
Several real-life cases have highlighted the growing prevalence of brushing scams. In one case, a resident in Texas received an unexpected package containing an electric toothbrush along with a QR code. The recipient was asked to leave a product review but became suspicious when the site prompted them for personal information. They wisely refrained from providing any details, avoiding the scam. Similarly, in New York, a woman received a package of beauty products and was directed to scan a QR code that led to a site asking her to verify a “purchase.” She, too, chose not to enter any information, suspecting that the package wasn’t legitimate.
So, what should you do if you receive a package with a QR code? Here are a few important steps to protect yourself:
- Do Not Enter Personal Information: If you scan a QR code and are directed to a website asking for personal details, such as your name, address, or credit card number, stop immediately. Do not input any information. Scammers rely on this step to steal your identity and commit fraud.
- Verify the Package: If you receive a package you weren’t expecting, check the sender information on the label. Contact the company listed or reach out to the delivery service to track the origins of the package. Be cautious of packages from unfamiliar companies or unverified senders.
- Report Suspicious Activity: If you suspect you’ve fallen victim to a brushing scam, report the incident to your local consumer protection agency, such as the Federal Trade Commission (FTC). They can investigate and help prevent further damage.
- Monitor Your Accounts: Keep an eye on your bank and credit card statements for any signs of unauthorized charges. If you entered any sensitive data on a suspicious site, consider placing fraud alerts on your accounts or even freezing your credit to prevent further harm.
- Educate Others: Brushing scams can affect anyone. Spread the word to family and friends to ensure they know how to recognize and avoid these deceptive tactics.
While brushing scams can feel alarming, the key to protecting yourself is awareness. By simply being cautious about sharing personal information and verifying any unsolicited packages, you can help safeguard your personal data.
