If you’ve received a package like this that you didn’t order, you’re looking at a Brushing Scam. But there is a new, more dangerous "twist" we want you to be aware of: The QR Code. Notice that small square QR code in the bottom right corner? While legitimate shipping labels use them for internal tracking, scammers are now using them for "Quishing" (QR Phishing). The Risk: Fake Tracking Sites: Scanning the code may take you to a professional-looking website that asks for your "delivery preference" or a "re-delivery fee." This is a trap to steal your credit card info. Malware: Some codes are designed to trigger an automatic download of malicious software onto your phone. Identity Theft: The site may ask you to "verify your identity" by entering your SSN or birthdate to see who sent the "gift." How to Protect Yourself: Don’t Scan it: If you didn't order the package, there is no reason for you to scan any part of the label. Verify via Official Channels: If you’re curious about a package, type usps.com directly into your browser and manually enter the tracking number. Never trust a link provided by a QR code on a suspicious package. Cover it Up: If you plan on keeping the items or giving them away, take a black marker and black out that QR code and your personal address before disposing of the packaging. Click here to read the entire article: https://www.uspis.gov/news/scam-article/ brushing-scam