CHARLOTTE, N.C. — As we order all those holiday gifts online, you might want to be careful of some of the boxes that wind up at your door.
Here's the scenario: you get a random package at your door that's addressed to you. But this secret Santa could be on the naughty list trying to steal your information.
To see how to look out for something like this and how this scam works we went to:
- QR Code Developer, a business that helps make QR codes
- Juliana O’Rork with the Better Business Bureau of Southern Piedmont and Western N.C.
QR Code Developer says this is called a "brushing scam". Here's how it works: a package will arrive at your door with a gift inside with your name on the front.
“Basically what’s happening is [someone] either sending products to people and picking addresses off the web randomly. Then it allows them to write a fake customer review on their product,” O’Rork said.
Scammers are starting to take it a step further; they will then have a QR code inside the package that instructs you to register your new product online or scan to access more details about who sent you the package.
The QR code will actually take you to a phishing website to ask you to fill out more information into a form, like your banking information
So what should you do if you get one of these packages? O'Rork says simply don't scan the code.
“It could potentially grab personal information, it can put malware on your device," she said, "so we really encourage people not to scan QR codes especially if they don’t know where they come from."
If you have received an unwanted package, make sure to check your existing accounts and change any passwords.
Contact Meghan Bragg at mbragg@wcnc.com and follow her on Facebook, X and Instagram.