There is a new scam tactic known as “brushing” that is spreading rapidly across the U.S., targeting millions with QR codes. The FBI has warned about this scam and said that you may find danger at your doorstep disguised as a package.
What Is a Brushing Scam? How Does it Work?
This new tactic is spreading quickly and, in most cases, you receive a package that you did not order containing an item of low value. The package does not have a return address but instead has a QR code that tricks most people into scanning it, thinking it provides details about the package.
When you scan the QR code, you may be directed to a site that asks you for personal or financial information, or even more. Additionally, scanning the code may download or install malware in your phone that steals your data.
Why This Is So Dangerous
“Brushing” has been used for years by online vendors to increase ratings for their products by sending unsolicited packages to individuals and then using the names and addresses of the recipients to post fake reviews of their shops and products. These online vendors do so to boost their product’s ratings and increase the visibility on e-commerce platforms to make them appear trustworthy and popular than they really are.
Nico Chiaraviglio , a cybersecurity expert warns that scammers are also using multiple specific channels, including email, SMS, and voice phishing, also known as vishing, to take advantage of user behaviors and expand the scope of their attacks.
This new scam is part of other digital fraud trends the FBI is tracking, including fake app links, phishing emails, and voice message attacks where scammers impersonate celebrities.
How to Protect Yourself
It is essential to take precautions when you come across packages at your doorstep that you had not ordered. The best thing is to avoid scanning the QR code on packages that you have no idea about their source. Here are additional tips:
- Avoid entering personal or financial information after scanning a QR code.
- Secure your phone regularly by reviewing app permissions.
- Avoid scanning QR codes on packages with no sender information.
- Request a free credit report to monitor if you are exposed to fraud.
- Report suspicious activity to the FBI Internet Crime Complaint Center at www.ic3.gov.
Older people especially those with limited online skills can find help through the Department of Justice, Elder Justice Hotline at 1-833-FRAUD-11 (or 833-372-8311).
Conclusion
The widespread of the brushing scam involving QR codes is an indicator that cybercrime is evolving at a fast rate that might catch many people unaware. The FBI has sounded the alarm, asking Americans to stay vigilant. It is crucial to think twice before scanning a QR code on a package that you did not order and that has no sender information.