FBI Warning: Mysterious Packages with QR Codes Are the Latest Scam
Received a strange package with a QR code? It could be a scam. Learn how criminals use unsolicited deliveries to steal your data—and how to stay safe.
If you've received a package you didn't order, especially one with no return address and a QR code printed on the box, stop right there.
The FBI is warning about a dangerous new scam where criminals send packages with malicious QR codes, hoping you'll scan out of curiosity. What looks like an odd delivery could be the gateway to stolen identities, emptied bank accounts, or compromised devices.
This isn't junk mail. It's a high-tech trick wrapped in cardboard.
The Setup That Hooks Victims
Here's what arrives: An unexpected package with no return address, containing a QR code and generic items like phone accessories or cosmetics. You wonder: "Is this a mistake? A forgotten order?"
That moment of curiosity is exactly what scammers exploit.
How the Attack Unfolds
The FBI calls this a dangerous evolution of "brushing scams," where vendors once sent free items to generate fake reviews. Now criminals embed QR codes that either direct you to phishing sites demanding personal details or prompt malicious app downloads that steal access to your contacts, camera, and passwords.
The QR code becomes a digital Trojan horse you invite in with one scan.
What Makes This Scam Particularly Effective
The danger lies in how ordinary it feels. We've normalized QR codes for restaurant menus, package tracking, and product registration. When one appears in a seemingly legitimate context, it doesn't trigger our threat radar.
Add the mystery of an unmarked package, and the psychological hook is perfectly set.
Your Response Plan
Don't scan anything.
Instead: Check with family about surprise deliveries, inspect for missing return addresses, and document the package with photos (without scanning codes). Report incidents to the FBI's Internet Crime Complaint Center at www.ic3.gov, or call 1-833-FRAUD-11 if you're over 60.
If you suspect identity theft, run immediate credit checks with major bureaus.
Take Action Today
Share this warning with people who might scan out of curiosity: seniors, students, or busy parents who juggle multiple deliveries. Review your recent packages and report anything suspicious. Most importantly, establish this rule: never scan a QR code you didn't request or can't verify.
Building your scam defense happens one smart habit at a time.
Stay safe. Be ready. Online and off.
Every effort has been made to ensure the accuracy and reliability of the information presented in this material. However, Labbe Media, LLC does not assume liability for any errors, omissions, or discrepancies. The content is provided for informational and educational purposes only and should not be considered professional advice. Viewers are encouraged to verify any information before making decisions or taking actions based on it.