As the new year begins, many shoppers are preparing to take advantage of the online sales available in January. However, experts are cautioning consumers about a new threat known as the “brushing” scam. There are two main types of scams that are emerging. The first is the traditional “brushing” scam.
The scam occurs when an individual sends an unsolicited package to a person’s home address, containing an item that they didn’t order. These packages will often be labeled with your name and home address but will contain no return address. This can be done by third-party sellers, who sell products on sites such as Amazon. Fraudsters will obtain your name and home address from a data breach, social media, or a public directory and then use this to set up an Amazon account in your name. They will then purchase the product from their store using your credentials and ship it to your home address.
Once you have signed to confirm receipt of the parcel, the scammer then writes a positive verified review for the product in your name, to help improve their seller rating and to help drive more sales.
The second one is QR code ‘brushing’ scam? This happens where unsuspecting individuals receive unsolicited packages containing QR codes. Scanning these codes directs them to phishing websites designed to steal personal information.
Scammers have started to escalate their tactics by including a QR code inside packages. This QR code prompts you to register your new product online or directs you to more information about the sender. However, when scanned, the QR code actually leads to a phishing website that asks for sensitive personal information, such as your banking details. Once you provide this information, the scammer gains access to it.
What to do if you encounter a QR code ‘brushing’ scam?
Kushal Tantry, CEO of QR Code Developer, a software development that creates QR code technology, says if you receive an unexpected package that is addressed to you and the package contains a QR code, do not scan it.
“Make sure to inform the company that allegedly sent the package through their official contact details and don’t use any contact information provided on the package itself,” said Tantry.
Tantry advises that the first step to take after receiving an unexpected package is to check your online accounts and change your passwords. This is important in case the scammer has gained access to your accounts.
If you receive an unsolicited package, the scammer may only have your name and home address. However, it’s essential to keep an eye on your bank accounts for any unusual activity.
Author
