Is it a secret admirer or a scam?

Did you know that scammers have a 40+ page “playbook” that they use to spark romantic interest? It is equipped with charming come-ons and jokes to make you laugh. Their play? Flattery and laughter can bring on your feel-good emotions, which helps make it easier to fall in love. This knowledge can help you question whether a person seeking connection online is genuine admirer, or a scammer.

Who sent that gift? Secret admirer? Scam? Watch your mailbox for unsolicited gifts. They could be from scammers.

Do you know what else brings on feel-good emotions? Gifts. Scammers have a new move: send an unexpected package addressed to you at your home from an unknown sender. With the day of love celebration around the corner, when you receive such a gift you may think you have a secret admirer. Sadly, this is another scam trying to get your information. When you open the package, a note says it is a gift, but it still doesn’t say who sent it. You really want to know if someone out there thinks you are awesome. Conveniently, there is a QR code. The QR code leads you to a website that phishes for your personal information or exposes you to malware and hackers.

QR codes are easy to scan, and they lead you straight to a website of choice. This can be useful when working with legitimate sources, but harmful when linked to the unknown.

  • Always think twice before scanning a QR code.
  • Only scan QR codes from sources you trust.
  • When using QR codes, be especially suspicious when the scan displays an unknown website address and when website addresses are hidden, such as when a URL shortener is used (Bitly, TinyURL, Ow.ly, etc.).

Did you receive a gift that did not include a QR code or any information about the sender? I am sorry to say that this is still likely not an admirer. Scammers that find your address or other personal information online might send you unsolicited products to use your name to make online reviews to support a disreputable company. This is concerning because it means your information is compromised and unsuspecting consumers will make purchasing decisions based on lies.

If your personal information has been compromised, review these helpful tips from the FTC:

  • If you scanned the QR code and entered your credentials, like your username and password, into a website, change your password right away. Create a strong password that is hard to guess and turn on two-factor authentication.
  • If you’re concerned someone has your personal information, get your free credit report at AnnualCreditReport.com. Look for signs that someone is using your information, like accounts in your name you don’t recognize.
  • Also review your credit card bills and bank account statements and look for transactions you didn’t make. And consider taking other steps to protect your identity, like freezing your credit or putting a fraud alert on your credit report.
  • If you think someone stole your identity, report it, and get a personal recovery plan at IdentityTheft.gov.
  • What else can you do to protect your personal information? Regularly update your computer software and your phone to get the latest security patches. And learn to recognize a phishing email or text message.

And what about the package? It sounds like it was a gift (ftc.gov).

Want to know more about scams? The Consumer Assistance Program is your local Vermont resource for scam prevention information: ago.vermont.gov/cap or 1-800-649-2424

References:
https://consumer.ftc.gov/consumer-alerts/2025/01/scam-alert-qr-code-unexpected-package?utm_source=govdelivery

https://consumer.ftc.gov/articles/what-do-if-youre-billed-things-you-never-got-or-you-get-unordered-products#unordered

Stay safe online this Valentine’s Day!

Looking for love online? The Consumer Assistance Program is here to help you make sure that your personal information and money are secure!

Romance Scams

How it works: The scammer creates a fake profile on a dating site or app. They may also initiate contact through Instagram, Facebook, Words With Friends, or Google Hangouts. Then, the scammer strikes up a relationship with their victim, gains their trust, and maintains sustained contact.

Spotting the scam: The scammer spins a story and asks you to send them personal information or money. They may ask you to send gift cards, mail cash, or wire them money via Western Union or MoneyGram.

What to do: End all communications with the scammer. Block the individual and/or report them to the website or app company. Do not send money or reveal personal information such as: social security number, bank accounts, credit card numbers, photo of your driver’s license, etc. If you have sent money or given the scammer access to sensitive information, call the Consumer Assistance Program.

Source: Federal Trade Commission

For more information about Romance Scams, see our blog post from February 2018.

Sextortion Emails

How it works: You receive an email from an unknown source. The message claims that they know your passwords and have planted malware on your computer. They claim that the malware has captured evidence of all your computer activity – including sensitive photos or visits to adult websites.  They threaten to share this evidence with all of your email or social media contacts. The scammer demands hush money in the form of gift cards, Bitcoin, or wire transfers.

Spotting the scam: The message might look generic and have numerous typos. They demand that you respond quickly, maybe within 24 hours. The passwords they claim to have appear to be old or may be log-in information you use for a website.

What to do: Do not reply to the message. Do not send money or personal information. Change your passwords to ensure your online security, especially if a website you use has recently experienced a data breach. Do not click on any links or attachments on the email. Make sure that your antivirus software is up to date.

Adult Website Pop-Ups

How it works: You are visiting an adult website when a pop-up message appears. The pop-up might be flashing or include sound. The pop-up may claim to be “Windows Support” or state that “Your computer may have a virus!” It is designed to pressure the user into a sense of panic. The message might prompt you to call someone for technical assistance.

Spotting the scam: Real computer tech support specialists will never ask you to call them in this manner. The pop-up may demand immediate action, payment, or prompt you to download something.

What to do: Turn off your computer and disconnect from the internet. Make sure that your antivirus software is up to date and functioning. If necessary, you may decide to seek out assistance from a trusted tech support professional.

Remember: some scammers are betting that topics of romance and sex can be sensitive or even embarrassing. Please don’t let these feelings keep you from calling CAP to get help! The reality is that we regularly hear from consumers who have been affected by these scams. Pick up the phone and give us a call if you feel you may have been scammed: 1-800-649-2424.

Contributing Writer: Madison Braz

Content Editor: Crystal Baldwin