An Unexpected Package

New scams are emerging all the time. Below is a new one doing the rounds in the USA – chances are it won’t be long before it makes its way here.

An unexpected package from an unknown sender arrives in your name. You open it and find a note that says it’s a gift, but it doesn’t say who sent it. The note also says to scan a QR code to find out who sent it – or to get instructions on how to return it. Did someone really send you a gift? Or is it an attempt to steal your personal information?

If you know it’s really a gift, you can keep it. But know that the unexpected package could be a new twist on a brushing scam that could steal your personal information. (a brushing scam is when sellers send out packages to individuals without their knowledge or consent and then create positive reviews on the product in the individual’s name)

If you scan the QR code, it could take you to a phishing website that steals your personal information, like credit card numbers or usernames and passwords. It could also download malware onto your phone and give hackers access to your device.

If you scanned the QR code and entered your credentials, like your username and password, into a website, change your password right away. Create a strong password that is hard to guess and turn on two-factor authentication.

If you think you have been a victim you can request a copy of your own credit report and seek help at https://www.govt.nz/browse/ consumer-rights-and-complaints/ .

To protect your personal information be sure to regularly update your computer and phone software. Those regular software updates always contain the latest security upgrades.

Stay vigilant!


Originally by Alvaro Puig, Consumer Education Specialist, FTC (USA) Edited for NZ audience

Stay in touch

Stay updated with valuable insights, relevant news, and helpful tips and tricks delivered straight to your inbox.

Privacy PolicyDisclosure | © Copyright 2025 Milestone