CyberzSOC

Publication detail
← Back to advisories & guidance

Unsolicited Packages Containing QR Codes Used to Initiate Fraud Schemes ↗ source

July 31, 2025 FBI Alert

Summary

Share on X X.com Share on Facebook Facebook Email Email The FBI warns the public about a scam variation in which criminals send unsolicited packages containing a QR code 1 that prompts the recipient to provide personal and financial information or unwittingly download malicious software that steals data from their phone. To encourage the victim to scan the QR code, the criminals often ship the packages without sender information to entice the victim to scan the QR code. While this scam is not as widespread as other fraud schemes, the public should be aware of this criminal activity. This is a variation of a "brushing scam," which is used by online vendors to increase ratings of their products. In a traditional brushing scam, online vendors send merchandise to an unsolicited recipient and then use the recipient's information to post a positive review of the product. In this variation, scam actors have incorporated the use of QR codes on packages to facilitate financial fraud activities.

News Coverage

No coverage found in monitored research blogs or news feeds.

CVEs Referenced in This Publication

No CVEs are referenced in this publication.

Vendors Named in This Publication

No KEV-catalogued vendors are named in this publication.