ATLANTIC HIGHLANDS, NJ — Police are warning residents about a scam involving unsolicited packages containing malicious QR codes.
The Atlantic Highlands Police Department issued an alert about the scheme, which they describe as a variation of a brushing scam.
Victims receive unexpected packages, often in what appears to be legitimate Amazon packaging, containing items they did not order.
The packages typically include the recipient’s correct name and address but lack return address or sender information.
Inside the package or on a sticker outside, scammers include a note with a QR code urging recipients to scan it.
The notes often claim the scan will allow users to “learn more,” “see who sent the gift” or “claim a prize.”
Some variations include fake letters offering incentives for five-star reviews.
Scanning the QR code can lead to two outcomes, according to police.
In some cases, victims are redirected to fake websites designed to look like official Amazon or bank login pages, where they are prompted to enter personal and financial information.
In other cases, malware is automatically downloaded to the victim’s device, giving scammers access to personal data, accounts, text messages and passwords.
Police are advising residents not to scan QR codes from unsolicited packages.
