You might be excited to receive a surprise package in the mail during the holidays and wonder ‘who could it possibly be from?’ But if you weren’t expecting it and there is no return address, it’s likely a scam.
Third party online retailers and scammers use “brushing” schemes for a variety of reasons, many of which can put your personal information at risk. They always begin the same way: sending random recipients a small item by mail with no return address. You might receive a pack of seeds, an electronic device, a piece of jewelry, a household item or something else.
Some senders use your information to post fake positive reviews to boost ratings and sales of their products. Oftentimes, however, the package will also include a QR code or link to learn more or to report an issue. Responding to either may:
- Confirm information about you
- Send you to a page asking for sensitive personal details like your online banking credentials, or
- Install harmful malware that gives the criminal access to your device.
Remember – scanning a QR code is the same as clicking on a link, so if you’re not sure a code is legitimate, it’s best to contact the company directly through their known website or customer service line. While you are under no obligation to return the item, you may want to report the suspicious activity to the retailer or to law enforcement. Click here for tips from the US Postal Inspection Service on handling unsolicited packages.
If you are targeted, it’s possible your retailer account or contact information was obtained through a breach. Take appropriate precautions, including reviewing your online shopping history and recent account transactions. Be sure to also update your usernames and passwords in case they have been leaked. Using optional two-factor authentication tools, like automated alerts and one-time verification codes can give you an added layer of security in the event of a compromise.
Our bankers and fraud professionals are trained to help. If you ever think you have fallen victim to a scam, please give us a call right away so we can walk you through important steps to protect your identity and your accounts.
