Authorities and online safety experts are warning the public to remain vigilant following reports of suspicious unsolicited packages containing jewelry—accompanied by QR codes that could potentially compromise recipients’ personal information.
In a viral post circulating on social media, a concerned recipient described receiving an unexpected package containing a ring, which neither they nor their partner had ordered. The package, shipped via USPS Priority Mail, appeared to come from “Vicky” at a Lynwood, Washington address that turned out to be a storage unit facility, not a legitimate jewelry retailer.
The ring came in a red gift box and included cards claiming to be a “GRA Moissanite Report” and a “Certificate of Authenticity” with a QR code and registration instructions.
According to the post, the recipient contacted the facility listed as the return address and was informed that the address was being falsely used and had no connection to any jewelry business. They also claimed that scanning the QR code could potentially install malicious software on the user’s phone, enabling scammers to access sensitive information.
“So people beware! Scammers are getting sneaky!” the post warned. “Weird package today! It was a ring. Randy didn’t order it… turned out to be a scam!”
What Authorities Say
While no official law enforcement agency has yet issued a public statement specifically about this incident, cybersecurity experts advise extreme caution with unsolicited mail and QR codes, especially when items arrive unrequested.
“Scammers are now using QR codes more frequently to direct users to phishing sites or trigger downloads that install malware,” said a cybersecurity analyst. “Never scan a QR code from a source you don’t trust.”
This incident may be part of a wider trend known as “brushing scams”, where sellers send unsolicited items to boost fake online reviews using the recipient’s name and address. However, the addition of QR codes raises concerns that scammers may now be attempting to harvest data or install malicious software.
What You Should Do
If you receive a package you didn’t order:
- Do not scan any QR codes or visit unknown links.
- Report the package to the local post office or USPS Mail Fraud Division.
- Do not provide personal information to any numbers or websites listed in the package.
- If you suspect fraud, contact your local law enforcement or file a report at FTC.gov.
This is a developing situation, and residents are urged to stay cautious and alert. If you’ve received a similar package, share your experience with authorities to help prevent others from falling victim to this type of scam.
