The Westwood Police Department is warning residents about a new variation of the “Amazon QR Code” scam that has been reported nationwide.
According to Chief Michael R. Pontillo and department officials, the scam involves unsolicited packages delivered to homes that contain a malicious QR code. Authorities say scanning the code can lead to identity theft, stolen financial information, or malware being installed on a victim’s phone.
How the Scam Works
Unexpected Delivery
Residents receive a package—often appearing to be legitimate Amazon packaging—for an item they did not order. The parcel may have the recipient’s correct name and address but lacks clear return or sender information.
The Bait
Inside the package, or on a sticker attached to it, is a note featuring a QR code urging the recipient to scan it to:
-
“Find out who sent the gift”
-
“Learn more about your package”
-
“Claim a prize”
-
Leave a five-star review in exchange for a reward
Police say scanning the QR code may redirect victims to a fraudulent website designed to resemble an official Amazon or banking login page, prompting users to enter personal or financial information. In some cases, the code may automatically download malicious software, potentially giving scammers access to passwords, accounts, and other sensitive data.
How to Protect Yourself
-
Avoid scanning QR codes from unsolicited packages.
-
Never enter personal or financial information on websites accessed through unknown links.
-
Report suspicious deliveries directly through your official Amazon account.
-
Regularly monitor financial accounts for unusual or unauthorized activity.
Anyone who believes they may have been targeted or victimized by this scam is encouraged to contact their local police department.