Beware of packages containing malicious QR codes, FBI warns

The FBI has issued a warning about a new scam in which criminals are sending unsolicited packages containing a malicious QR code.

The QR code redirects gullible recipients to a page where they’re supposed to provide their personal or financial information.

There have also been cases where the QR code leads people to a page that contains malicious software they’re supposed to download. Once installed, the malware steals data from their device.

According to the FBI, victims are encouraged to scan the QR code by not providing any information about the sender.

Though this scam is not as widespread as other fraud schemes, the FBI feels that the public should be aware of this. The government law enforcement agency says this is a variation of a “brushing scam,” which is used by online vendors to increase ratings of their products.

“In a traditional brushing scam, online vendors send merchandise to an unsolicited recipient and then use the recipient's information to post a positive review of the product. In this variation, scam actors have incorporated the use of QR codes on packages to facilitate financial fraud activities,” the FBI’s Internet Crime Complaint Center (IC3) states in a Public Service Announcement.

To protect yourself from harm, you should be aware of any unsolicited packages containing merchandise you didn’t order. Secondly, you should be aware of packages that don’t include any information regarding the sender.

In addition, you shouldn’t authorize phone permissions and access to websites and applications when a prompt pops up and asks for your consent. If you can’t trace the origin of a QR code, you shouldn’t scan it.

Lastly, if you believe that you’re the target of a brushing scam, secure your online presence by changing account profiles. To be safe, you should request a free credit report from one of the national credit reporting agencies to identify possible fraudulent activities.

Should you receive fraudulent or suspicious activities, the FBI urges you to report this to the IC3 agency and to include as much information as possible.