A new wave of financial fraud is targeting consumers through unsolicited packages containing QR codes, authorities are warning. The scam, which has been reported in both the United States and France, involves criminals sending individuals bank cards they did not request, accompanied by instructions to activate the card by scanning a QR code. This code redirects victims to a sophisticated phishing website designed to steal their banking credentials and other sensitive personal information.
The scheme represents an evolution of existing fraud tactics, building on the increasing prevalence of “quishing” – a portmanteau of “QR code” and “phishing” – and brushing scams. While brushing scams traditionally involved sellers sending unsolicited products to generate fake reviews, this new iteration directly aims to steal money and data. The Pinellas County Sheriff’s Office in Florida recently cautioned residents about fake QR codes being placed over legitimate ones on parking meters and pay stations, highlighting the expanding reach of this type of fraud.
According to the French national police, individuals are receiving packages containing a bank card and a letter urging them to activate the card by scanning the included QR code. The QR code leads to a fraudulent website that mimics a legitimate banking portal. Unsuspecting users who enter their details on this fake site are then exposed to potential financial loss.
The FBI issued a similar warning in September 2025, noting that criminals are mailing unsolicited packages containing QR codes that, when scanned, can lead to stolen personal details, drained bank accounts, or malware installation. Commerce Bank has also published a guide to QR code scams, emphasizing the tactic of using QR codes to direct users to phishing websites requesting banking information, credit card numbers, or login credentials.
The sophistication of these scams lies in their ability to exploit the growing public acceptance of QR codes as a convenient method for accessing information and making payments. According to data from late 2025, 73% of Americans scan QR codes without checking their destination. This widespread, uncritical adoption creates a fertile ground for malicious actors.
Law enforcement officials emphasize that banks will never send unsolicited cards with instructions to activate them via a QR code. Sandy Ozier, a senior vice president at Commerce Bank specializing in fraud prevention, advises that receiving an unexpected package with a QR code should be a significant red flag. “Their goal is to entice you to scan the QR Code which will then be followed by prompts for you to enter your personal information,” Ozier stated.
The scams are not limited to unsolicited packages. Authorities are also warning about fake QR codes being strategically placed over legitimate ones in public spaces, such as parking meters and restaurant menus. Lyn Reitz, a resident of St. Petersburg, Florida, recently fell victim to this tactic, losing over $1,000 after scanning a fraudulent QR code on a parking meter. Her credit card fraud protection system alerted her to multiple unauthorized charges shortly after she used the code to pay for parking.
The Federal Trade Commission (FTC) has also highlighted the use of QR codes in fraudulent schemes. The FTC advises consumers to be wary of urgent requests from unknown senders and to always check for tampering before scanning a QR code. The agency also notes that scammers are increasingly using QR codes to redirect users to phishing websites designed to harvest sensitive information.
Authorities recommend several steps to protect against these scams. Individuals who receive unsolicited packages containing QR codes should not scan them and should instead contact their bank directly. Anyone who suspects they have been targeted by a QR code scam should report it to their bank, file a police report, and change their passwords. Consumers should exercise caution when scanning QR codes in public places and carefully examine the destination URL before entering any personal information.
The rise of QR code scams underscores the need for increased vigilance and awareness among consumers. As QR codes become increasingly integrated into daily life, It’s crucial to remember that convenience should not come at the expense of security. The evolving tactics employed by fraudsters demonstrate a persistent effort to exploit technological advancements for malicious purposes, requiring a proactive and informed approach to financial security.
