HackFraudBrushing scam with malicious QR codes or links in unsolicited packages
Published: 29 Oct 2026 · Worldwide
Scammers send cheap unsolicited packages ('brushing') to real addresses to generate fake verified buyer reviews using the recipient's name. Packages may contain QR codes or links that lead to phishing, malware, or identity theft schemes. Advice: keep the package but avoid scanning codes or clicking links; monitor accounts.
Who is at risk
Anyone who uses social media, email or messaging apps
How to protect yourself
- Do not click links in unexpected messages, posts or direct messages.
- Check the sender or account through the official website, not through the message.
- Never share passwords, codes or recovery phrases.
Source: Community reports (hackfraud.com)
Language: English Ελληνικά Español Français Deutsch Italiano Português Nederlands Polski Türkçe Русский العربية हिन्दी 中文 日本語