← Return to Blog

27 Feb, 2025

Information Security Brief - February 2025

Scam Alert: QR code on an unexpected package.

An unexpected package from an unknown sender arrives in your name. You open it and find a note that says it’s a gift, but it doesn't say who sent it. The note also says to scan a QR code to find out who sent it — or to get instructions on how to return it. Did someone really send you a gift? Or is it an attempt to steal your personal information?

If you know it’s really a gift, you can keep it. But know that the unexpected package could be a new twist on a brushing scam that could steal your personal information. If you scan the QR code, it could take you to a phishing website that steals your personal information, like credit card numbers or usernames and passwords. It could also download malware onto your phone and give hackers access to your device. If you scanned the QR code and entered your credentials, like your username and password, into a website, change your password right away. Create a strong password that is hard to guess, and turn on two-factor authentication. If you’re concerned someone has your personal information, get your free credit report at AnnualCreditReport.com. Look for signs that someone is using your information, like accounts in your name you don’t recognize. (You can get a free credit report every week.)

Also review your credit card bills and bank account statements and look for transactions you didn’t make. And consider taking other steps to protect your identity, like freezing your credit or putting a fraud alert on your credit report. If you think someone stole your identity, report it, and get a personal recovery plan at IdentityTheft.gov.

Puig, Alvaroi, “Scam alert: QR code on an unexpected package”, FTC.Gov, 23 January 2025, https://consumer.ftc.gov/consumer-alerts/2025/01/scam-alert-qr-code-unexpected-package

← Return to Blog

Disclaimer

This publication attempts to provide timely and accurate information concerning the subjects discussed. It is furnished with the understanding that it does not provide legal or other professional services. If legal or other expert assistance is required, the services of a qualified professional should be obtained.

Related Posts

Information Security Brief - April 2025

Here Are Some Simple Tips To Avoid Phishing Attempts This is important: If you receive a malicious email, it is very lik...

Read more

Information Security Brief - January 2025

Thinking of Using Generative AI at Work? Generative Artificial Intelligence (AI) can be a useful tool to distill informa...

Read more

CEO Update - Q1 2025

It's Unfair. More than 96% of the banks in this country are community banks, but the very largest banks have capabilitie...

Read more