Scam Alert: Don’t Scan That “Free Gift” QR Code!

How the Scam Works

Scammers are mailing out cheap, unexpected items to spark your curiosity. When you scan the QR code with your phone’s camera, one of three bad things usually happens:

• Fake Logins: You are taken to a fake website that looks like Amazon, a bank, or a county login page. If you type in your username and password, the hackers steal it.
• Hidden Viruses: Scanning the code can silently install viruses or spyware on your phone or computer.
• Data Theft: Once they have your passwords or access to your device, hackers can steal sensitive county or personal data.

Remember: When in doubt, don’t scan!

What To Do If You Get a Suspicious Package

1. Don’t scan the code. No legitimate company will send you a mystery gift and require you to scan a QR code to find out who it’s from.
2. Don’t enter any information. If you already scanned the code, do not type any passwords or personal information into the website that pops up.
3. Act fast if you scanned it. If you accidentally scanned the code and entered a password, change that password immediately from a different device, and keep an eye on your bank accounts.
4. Keep or toss the gift. By federal law, you are allowed to keep unsolicited merchandise mailed to you. You can keep the trinket, give it away, or throw it in the trash—just keep the QR code away from your phone.
5. Report it. You can report scams like this to the Federal Trade Commission (FTC) at ReportFraud.ftc.gov or to the U.S. Postal Inspection Service.