Woman issues warning after receiving mystery package by scammerin her mailbox

Photo by@vsg_twinboymom/TikTok George Sheldon/ShutterStock

That free item you got in the mail may actually be a scam. (Let’s be real: Who’s giving anything away for free for funsies?)

A sparkly scam

In a popular video that has garnered over 2.4 million views, a TikToker named Ronica Janae (@vsg_twinboymom) shared a warning that could potentially protect your finances from being emptied and your personal information from being compromised.

She mentioned that upon inspecting her mailbox, she found a "diamond" ring (which appeared to be an engagement ring) was sent to her.

Baffled, Janae reviewed her TikTok store and Amazon profiles to ensure she hadn't unintentionally ordered something she had overlooked.

Finding nothing, she examined the package more closely. It contained a card featuring a QR code and a booklet that appeared to be from a jeweler.

She googled the address on the package and quickly learned it was a scam.

The aim behind the scam is that a person who gets the package in the mail will scan the QR code to learn more about the company that sent them free jewelry. But the QR code actually enables them to get into your phone and steal your information.

On top of that, the rings are of poor quality, which Janae demonstrated. She was able to break it in half on camera with barely any effort.

“Just wanted to warn everyone because it really caught me off guard as to what the hell it could be,” she said.

FBI warning

Not long ago, the FBI issued a cautionary note about how scammers were exploiting QR codes to trick individuals and gain unauthorized access to their digital profiles. This method is swift and seemingly harmless, which means you might not realize you've been scammed until you notice a significant charge on your credit card or find your bank account has been emptied.

Regrettably, these offenders are becoming more inventive, altering both tangible and virtual QR codes, complicating the task of identifying fraudulent codes.

“What happens when you scan a QR code that isn’t the one you’re supposed to be scanning is that can give the criminal access to your phone, which then allows them access to any apps that you normally use,” Stephanie Walker, assistant section chief of the FBI Cyber Division said.

To make matters worse, law enforcement may not be able to help once funds are transferred.

The FBI’s El Paso division speculated that this scam trend started around 2022. Keep in mind, that during the peak pandemic (2020-2021) many businesses switched some of their physical offerings (like menus) to QR codes to minimize contact.

As QR codes became a part of everyday life, it seems scammers saw a ripe opportunity.

How to protect yourself

1. Verify that the website linked by the QR code is genuine and makes logical sense. If you're using it in a store or eatery, a fraudster might use a domain name that's slightly incorrect or misspelled.

2. When you're using a physical QR code, ensure it hasn't been altered. Fraudsters often place their fraudulent QR code on the surface of the genuine one.

3. Avoid installing apps directly from the QR code; instead, visit your phone's app store.

4. Avoid installing a QR code scanner app. Your phone already comes with a built-in camera function for this purpose.

Commenters react

“IT security engineer here. This is real folks. Stay safe,” a top comment read.

“at my bank. I overheard this elderly lady crying to one of the bank employees. Turns out. She got the same package & a card asking to scan the QR code. And Bam! they stole $40k Poor Lady,” a person shared.

“I don’t even trust the QR codes at the grocery store for digital coupons. I have become skeptical of everyone and everything,” another wrote.