Blog

We all have our guard up these days due to scammers, but you never know when a really good attempt will get the best of us. The latest is a twist on a brushing scam that could see your personal information compromised.

Let’s say an unexpected package arrives at your home from an unknown sender. You open it to find a note saying it’s a gift, but again, there’s no clue about who sent it. The note instructs you to scan a QR code to reveal the sender or get instructions on how to return it.

By scanning the QR code, you might be taken to a phishing website that steals your personal information, like your credit card numbers, usernames or passwords. It could also download malware onto your phone and give hackers access to your device. Here are a few tips if you find yourself in this situation.

• If you scanned a QR code and entered your credentials, change your password right away. Create a strong password that is hard to guess and turn on two-factor authentication.
• If you think someone has your personal information, get your free credit report at AnnualCreditReport.com. Look for signs that someone is using your information, like accounts in your name you don’t recognize. (You can get a free credit report every week.)
• Review your credit card bills and bank statements for transactions that aren’t yours.
• Consider taking other steps to protect your identity, like freezing your credit or putting a fraud alert on your credit report.
• If you think someone stole your identity, report it and get a personal recovery plan at IdentityTheft.gov. You can also protect your personal information by regularly updating your computer software and your phone for the latest security patches. And learn to recognize a phishing email or text message.

And what about the package? The law says you can keep it as a gift.