Technology offers a chance for connectivity and access most people would never have had in the past, but it’s also brought a new way for criminals to attack everyday people. The Federal Bureau of Investigation is warning against a new kind of scam that targets everyone with a smartphone.
What Is a Brushing Scam?
On Aug. 11 the FBI’s Pittsburgh office revealed the government organization is warning smartphone users against a new type of “brushing” scam.
“In a traditional brushing scam, online vendors send merchandise to an unsolicited recipient and then use the recipient’s information to post a positive review of the product,” a statement from the FBI read.
Ever heard of a “brushing scam?” There’s a new version of it happening, and the FBI is warning the public. Criminals are sending unsolicited packages containing a QR code, and once scanned, victims provide personal and financial information while unknowingly downloading malicious… pic.twitter.com/3A1tQNIuW3
— FBI Pittsburgh (@FBIPittsburgh) August 11, 2025
What’s Different About This “Brushing” Scam?
“In this variation, criminals send unsolicited packages containing a QR code that prompts the recipient to provide personal and financial information or unwittingly download malicious software that steals data from their phone,” the FBI said.
“To encourage the victim to scan the QR code, the criminals often ship the packages without sender information to entice the victim to scan the QR code. While this scam is not as widespread as other fraud schemes, the public should be aware of this criminal activity.”
How to Avoid the Scam
The FBI offered a number of different ways to help avoid the scam or what to do if you believe you’ve been a victim of the new brushing scam.
- Beware of unsolicited packages containing merchandise you did not order.
- Beware of packages that do not include sender information.
- Take precautions before authorizing phone permissions and access to websites and applications.
- Do not scan QR codes from unknown origins.
- If you believe you are the target of a brushing scam, secure your online presence by changing account profiles and request a free credit report from one or all the national credit reporting agencies (Equifax, Experian, and TransUnion) to identify possible fraudulent activity.
Related: Southwest Airlines Announces Change on All Flights Starting August 13
