Did you know that scammers have a 40+ page “playbook” that they use to spark romantic interest? It is equipped with charming come-ons and jokes to make you laugh. Their play? Flattery and laughter can bring on your feel-good emotions, which helps make it easier to fall in love. This knowledge can help you question whether a person seeking connection online is genuine admirer, or a scammer.

Do you know what else brings on feel-good emotions? Gifts. Scammers have a new move: send an unexpected package addressed to you at your home from an unknown sender. With the day of love celebration around the corner, when you receive such a gift you may think you have a secret admirer. Sadly, this is another scam trying to get your information. When you open the package, a note says it is a gift, but it still doesn’t say who sent it. You really want to know if someone out there thinks you are awesome. Conveniently, there is a QR code. The QR code leads you to a website that phishes for your personal information or exposes you to malware and hackers.
QR codes are easy to scan, and they lead you straight to a website of choice. This can be useful when working with legitimate sources, but harmful when linked to the unknown.
- Always think twice before scanning a QR code.
- Only scan QR codes from sources you trust.
- When using QR codes, be especially suspicious when the scan displays an unknown website address and when website addresses are hidden, such as when a URL shortener is used (Bitly, TinyURL, Ow.ly, etc.).
Did you receive a gift that did not include a QR code or any information about the sender? I am sorry to say that this is still likely not an admirer. Scammers that find your address or other personal information online might send you unsolicited products to use your name to make online reviews to support a disreputable company. This is concerning because it means your information is compromised and unsuspecting consumers will make purchasing decisions based on lies.
If your personal information has been compromised, review these helpful tips from the FTC:
- If you scanned the QR code and entered your credentials, like your username and password, into a website, change your password right away. Create a strong password that is hard to guess and turn on two-factor authentication.
- If you’re concerned someone has your personal information, get your free credit report at AnnualCreditReport.com. Look for signs that someone is using your information, like accounts in your name you don’t recognize.
- Also review your credit card bills and bank account statements and look for transactions you didn’t make. And consider taking other steps to protect your identity, like freezing your credit or putting a fraud alert on your credit report.
- If you think someone stole your identity, report it, and get a personal recovery plan at IdentityTheft.gov.
- What else can you do to protect your personal information? Regularly update your computer software and your phone to get the latest security patches. And learn to recognize a phishing email or text message.
And what about the package? It sounds like it was a gift (ftc.gov).
Want to know more about scams? The Consumer Assistance Program is your local Vermont resource for scam prevention information: ago.vermont.gov/cap or 1-800-649-2424
References:
https://consumer.ftc.gov/consumer-alerts/2025/01/scam-alert-qr-code-unexpected-package?utm_source=govdelivery
https://consumer.ftc.gov/articles/what-do-if-youre-billed-things-you-never-got-or-you-get-unordered-products#unordered