FBI Warns Indiana Residents of New QR Code Package Scam

Every so often, a scam pops up that’s so sneaky, it makes you double-check your mailbox. That’s exactly what happened recently, when the FBI raised the alarm about a crafty new scheme. Unsuspecting people are receiving unwanted packages with QR codes, and if you scan them, the consequences can be more than just awkward - they can be downright dangerous.

A New Twist on the “Brushing Scam”

This scam is a twist on what’s known as a “brushing scam” – normally, sellers (scammers) will send random items to people to fabricate product reviews. But this time, they've changed their tactics: instead of goodies, the packages contain a QR code. They are counting on you scanning that code, which may then lure you into giving up personal or financial info or, even worse, installing malware on your device.

ALSO READ: FBI Urges Indiana Residents to Stay Vigilant as ‘Jugging’ Crimes Spread

That QR code is the key tool of the scam – the packages are sent without sender info to make you just curious (or impatient) enough to scan it.

Why Hoosiers Should Be Concerned About This Scam

1. We get our fair share of packages, especially from online shopping and home deliveries.
2. That curiosity bubble can be higher if the package looks legit, or vague enough to pique interest.
3. Even rural areas of Indiana might be targeted, especially as scammers broaden their reach.

How to Protect Yourself from QR Code Scams

• If the package wasn’t ordered, don’t open it, and definitely don’t scan any QR code.
• Legitimate businesses usually include a return address. Be cautious if there is no sender info.
• If you've already opened it, dispose of it responsibly – and if you’re still worried, contact authorities.
• Never enter personal info on a website you’ve landed on after scanning an unknown QR code.
• Keep your devices updated and protected with security software.
• When using a QR reader, choose one that displays the URL before opening it, so you can assess its legitimacy.
• If you suspect you’ve been targeted, report it to the FBI’s Internet Crime Complaint Center (IC3) and consider monitoring your credit.
• For older adults or those needing extra help filing complaints, the DOJ’s Elder Justice Hotline (1-833-FRAUD-11) is a supportive resource.

Get our free mobile app

A Friendly Reminder About QR Codes

They’re super convenient—buzz them with your phone, and voilà, you’re online. But in the wrong hands? That can be a one-way ticket to a scammer's website. Scanning a suspicious QR code is a lot like clicking a suspicious link without seeing where it really goes.