Most people are familiar with QR codes—those small, black-and-white squares that can be scanned with a smartphone camera to quickly open a website or app. While convenient, QR codes are also being exploited by cybercriminals in a new and deceptive scam.
The scheme typically begins when you receive an unexpected package in the mail. There’s no sender information or recognizable return address, but a QR code is printed directly on the box. Inside, you’ll usually find an item with little or no real value. The true purpose of the package is not the item itself—it’s the code.
Criminals are banking on your curiosity. By scanning the QR code, you could be redirected to a fraudulent website that prompts you to enter personal information, such as login credentials or payment details. In some cases, the site may even attempt to install malicious software onto your device without your knowledge.
How to Protect Yourself from QR Code Package Scams:
Treat any unexpected delivery with caution—especially if there’s no sender information.
Never scan a QR code unless you are absolutely sure of its source. Malicious codes can lead to dangerous websites.
Pay attention to what permissions a website or app requests after scanning. Cybercriminals often exploit these permissions to steal data or spread malware.
By staying alert and resisting the temptation to scan suspicious codes, you can protect your personal information and keep your devices safe.