Site icon Hoskins Turco Lloyd & Lloyd

Brushing Scam Warning: Don’t Scan QR Codes in Free Packages

It starts with a knock at the door—or maybe just the soft thud of a package landing on your porch. You open the box and find a random item you didn’t order. There’s no receipt, no note, no sender info. Just a small card with a QR code inviting you to scan to “find out who sent your gift.” 

Seems harmless, right? 

Wrong. 

This seemingly innocent delivery may actually be part of a “brushing” scam, and it’s on the rise here in Florida, especially in areas like Port St. Lucie, Fort Pierce, Vero Beach, as well as interior areas of Florida like Okeechobee  and Sebring. These scams are more than just a nuisance—they can be dangerous and invasive, and you could unknowingly put your personal data, finances, and identity at risk

Here’s what you need to know to protect yourself and your loved ones.
 

What Is a Brushing Scam? 

A brushing scam is a deceptive tactic used by fraudsters to boost fake product reviews online. Typically, the scam involves a third-party seller (often from overseas) sending unsolicited, low-cost packages to random people in the U.S. using stolen personal information. Once the package is delivered, the scammer creates a fake buyer profile using your name and address and leaves a glowing product review—giving the illusion that the product was legitimately purchased and well-received. 

While the packages may contain random items like sunglasses, USB chargers, phone stands, or costume jewelry, they often now include a QR code—and that’s where things get dangerous. 

The New Twist: QR Codes = Instant Access to Your Private Data 

In newer brushing scam versions, the package includes a QR code with messaging like: 

What many don’t realize is that scanning these QR codes can be a direct gateway for hackers. They can embed malware, phishing links, or even redirect you to malicious websites that trick you into entering sensitive personal details like: 

In some cases, simply scanning the code can give the scammer remote access to your smartphone

What to Do If You Receive a Package, You Didn’t Order 

1. Do Not Scan the QR Code 

No matter how convincing or curious the message may be, do not scan it. It’s not worth the risk. 

2. Keep or Toss the Item – But Don’t Engage 

The physical item is usually harmless and cheap. Feel free to throw it away or keep it—but don’t visit any websites or enter any information connected to the item

3. Warn Others 

Share this information, especially with: 

4. Report the Scam 

You can report unsolicited packages to: 

Also consider filing a report with your local law enforcement, especially if you suspect your identity has been used or stolen. 

Protect Yourself, Protect Your Community 

These scams are designed to be sneaky, and even the most vigilant people can fall victim to them. The more we talk about it and share knowledge, the better protected we all are. 

Have you received a strange package recently? Think twice before opening or scanning anything, and help others by spreading the word. 

Need Legal Help? Hoskins Turco Lloyd & Lloyd Is Here to Protect You 

For over 40 years, Hoskins, Turco, Lloyd & Lloyd has fiercely advocated for thousands of individuals who have been victimized by negligent parties and insurance companies.  We don’t back down from a fight. When you are our client, you have the full force of one of Florida’s most reputable, results-driven law firms behind you. 

Whenever you have been wrongfully injured, denied critical government benefits, or facing extreme financial hardship, it’s important you have an experienced and understanding attorney on your side. 

Contact us today for a FREE case review by calling 866-930-6435