A Surprise Gift Package for You … Know Before You Scan the QR Code

The holidays are a time of happiness, kindness, and joy. Many live by the motto “It is Better to Give Than Receive.” But for scammers, receiving is their only goal this time of year.

At NexTier Bank, we are committed to keeping our customers informed of the latest scams, as well as your financial and personal information safe.

Recently, a new holiday scam has made it’s way onto Santa’s Naughty List — the Brushing Scam.

The way the Brushing Scam works is someone receives an unsolicited package with no return address, usually from Amazon or another online seller, containing an item they did not order. Items tend to be lightweight and inexpensive to ship including ping pong balls, a hand warmer, a flashlight, and face masks, according to the Better Business Bureau.

When the package is opened, there is a QR code to scan to find out who sent you the package. Before you take your smartphone out to scan the code, know IT’S A SCAM! By scanning the QR code, scammers can gain access to your mobile device and steal important login details like your Mobile Banking credentials, and even gain access to all your accounts, including your bank account.

What Should I Do If I Scanned the QR Code?

Don’t panic if you scanned the QR code, but do follow the steps below to report potential fraud.

  1. Contact NexTier Bank: By contacting our Customer Care Center at 1.800.262.1088 or stopping into the nearest branch, a Team Member will be able to help you keep your accounts safe from potentially fraudulent activity.
  2. Get Your Mobile Device Scanned: Take your smartphone to an IT professional to be scanned for any malware or intrusions PRIOR to accessing any application or changing any passwords.
  3. Change Your Account Passwords: Once your smartphone is free from any malware or intrusions, create new strong passwords using 12 characters or longer with a combination of letters, numbers, and symbols. Avoid using personal information, common words, or predictable patterns. Phrases or quotes make your passwords memorable and hard to guess.
  4. Notify Authorities: NexTier Bank encourages fraud victims to notify their local authorities when they have been scammed.
  5. Notify the Retailer: If unsolicited merchandise arrives from Amazon, report the scam using their Report Unsolicited Packages or Brushing Scams page, or click here.
  6. Notify the Federal Trade Commission: Fraud should be reported the Federal Trade Commission. To report an unsolicited package, click here.

What Do I Do with the Contents of the Package?

If you opened the package and you like it, you may keep it. The U.S. Postal Service says that by law any unsolicited merchandise sent to you and are under no obligation to pay for it.

Stay up to date with helpful tips and tricks to stop and prevent fraud with NexTier Bank’s Fraud Center.