A Mystery Package Doesn’t Need a QR-Code Investigation
Advice
A package arrives that you didn’t order. Inside is a note inviting you to scan a QR code to find out who sent it. Curiosity is doing exactly what the sender hoped it would.
The Federal Trade Commission warns that these codes can lead to fake websites that collect passwords or financial information, or download harmful software.
Leave the code alone. If you think a friend sent a gift, contact them directly. If a retailer might be involved, use its official app or type the website address yourself. The card inside the box doesn’t get to choose where you sign in.
Already entered a password?
Change it right away through the real service and turn on two-factor authentication. Review account activity. If you suspect identity theft, the FTC directs people to IdentityTheft.gov for a recovery plan.
If you help a loved one sort deliveries, talk through this before the next mystery box arrives. Make it easy to ask for a second look. Nobody needs a lecture on top of a suspicious package.
