The Hermiston Police Department is making the public aware of new scams popping up across the country involving QR codes.
QR code delivery scams and “Brushing” scams use QR codes to steal your information using a several different ruses. Here are a couple of the most common:
“Brushing” scams start with an unexpected package delivery from Amazon or other online retailer. The package will have no return address. Instead, there will be a QR code and message that encourages you to scan the code to see who sent the item to you.
“QR Code Delivery” scams refer to fraudulent schemes where scammers send text messages or emails with a QR code that appear to be from a legitimate company such as FedEx, USPS, UPS, etc. These messages often reference a package lost in transit or offer delivery tracking services.
Both use QR codes that, when scanned, link the user to a fake website designed to entice you to divulge personal information, such as login credentials, credit card or banking details. These websites may look legitimate and use similar or copied icons of known businesses.
HPD says the best practice is to refrain from scanning QR codes or clicking links on unexpected emails or surprise packages. If you receive a surprise package that has your name on it, there’s usually no crime in keeping it.
For more information, HPD points to an article from the Federal Trade Commission.