Crime & Safety

Did You Receive A Package You Didn't Order? Don't Scan The QR Code!

If an unexpected package shows up at your door, but you didn't order anything, it could be a "brushing scam" to steal your personal data.

PALOS PARK, IL — If an unexpected package shows up at your door, but you didn’t order anything, it could be a “brushing scam.”

Scammers are mailing out random packages, often from Amazon or other retailers, that people did not order. Inside, there may be a note asking you to scan a QR code to “see who sent it,” “claim a reward,” or “thank the sender.”

Scanning the QR code may take you to a fake website that steals your personal and financial information. Some QR codes can install malware on your phone or device. Repeat, do not scan the QR code.

Find out what's happening in Palosfor free with the latest updates from Patch.

Treat the unexpected package as “suspicious,” said Chief Joe Miller, of the Palos Park Police Department.

“This is a more nuanced scam,” Miller said. “By nature a victim is unaware of the loss of personal information and/or bank funds until a period of time later and this is after the fact reported as an identity theft.”

Find out what's happening in Palosfor free with the latest updates from Patch.

Typically, unsuspecting consumers are being sent random packages containing anything from electronics to beauty products or even fake designer goods. And it doesn’t stop with one package. If you scanned the QR code, expect more stuff you didn’t order showing up at your door.

In addition to the danger of accessing your bank account, scammers create fake accounts to pose five-star reviews boosting product ratings to deceive other shoppers.

What you can do:

  • Check your online shopping accounts for unauthorized purchases.
  • Notify the retailer (e.g., Amazon) and report the package as a scam. Keep photos of the item, packaging, and QR code. Retailers like Amazon have policies banning brushing and fake reviews, and they will investigate your report.
  • Monitor your financial accounts and online retailers for fake reviews using your identify if you did scan the QR code, and consider changing your passwords.
  • Scammers won’t stop at just one package, you may receive more mysterious packages, so consider pausing deliveries.
  • If you can identify the company that sent you the packages, look for fake reviews in your name and report them to the retailers.
  • File a report with the U.S. Postal Inspection Service if the unordered package came via U.S. mail, and the Federal Trade Commission Report Fraud.

The good news about brushing scams is that you get to keep the stuff. The Federal Trade Commission says you have a legal right to keep unordered merchandise. Don’t try to return it, especially if there are instructions to scan a QR code or enter information. It could needlessly compromise more of your personal information.

Get more local news delivered straight to your inbox. Sign up for free Patch newsletters and alerts.