New brushing scam: Watch out for unexpected gifts with QR codes, here's why

MEDFORD LAKES, NJ - If you receive a gift in the mail from an unknown sender, police are warning to be very suspicious of the package.

This week Medford Lakes Police posted on their Facebook page warning of a new brushing scam that entices recipients to scan a QR code to learn who may have sent this unexpected gift.

The gifts can range from rings and necklaces to Bluetooth speakers, according to police.

While police have warned scanning the QR code will give scammers full access to your phone and personal information, tech expert Anthony Mongeluzo of PCS LLC said that’s not quite how it works.

"The reports are saying when you scan this QR code they physically get access to your phone, they drain your bank account and they can install software and that is 100 percent false," said Mongeluzo. "What the QR code can do is it can direct you to a website, it can try to make you download an app, now it could also ask you to access for permission but scanning the QR code in itself will do you no harm. It’s the actions you take afterward."

The Better Business Bureau (BBB) said it’s receiving reports of brushing scams and recommends consumers stay vigilant.

"What people need to do is not be so curious about it. Don’t scan a QR code and start entering information if you’re not sure where that package came from," said Melanie McGovern, BBB spokesperson. "If you do get it, we recommend checking your accounts, perhaps Amazon or any of the accounts you use on a regular basis. Checking your email to see if there’s been any activity in there."

The BBB suggests reaching out to the retailer who sent the package to make them aware of the brushing scam package that was received. You can further protect your personal accounts by changing your passwords frequently.