FBI Warns: Watch Out: Scammers Are Mailing Out Malicious QR Codes

The FBI is alerting the public to a new scam involving unsolicited packages that contain nothing but a single QR code. While QR codes are commonly used for simple tasks like viewing menus or making payments, scammers are now using them as a tool for fraud.

According to Fox News, these mystery boxes—often with no return address—are being mailed at random in hopes that recipients will scan the code out of curiosity. Doing so can direct users to phishing sites, steal personal information, drain bank accounts, or install malware on devices.

This scam, dubbed “quishing” (a blend of “QR” and “phishing”), is a dangerous evolution of the older “brushing” scam, where people received random products linked to fake reviews. But this time, the risk isn’t just annoyance—it’s financial and digital compromise.

As reported by The Independent, victims have suffered serious losses. One elderly woman in the UK scanned a QR code she found in a parking lot. Scammers used it to hijack her identity, open bank accounts, and take out a $10,000+ loan in her name—leaving her locked out of her finances and reliant on family support.

To protect yourself, the FBI and cybersecurity experts recommend: