{"id":228707,"date":"2026-04-24T05:15:32","date_gmt":"2026-04-24T12:15:32","guid":{"rendered":"https:\/\/www.mcafee.com\/blogs\/?p=228707"},"modified":"2026-04-23T12:39:34","modified_gmt":"2026-04-23T19:39:34","slug":"usps-qr-code-scam-health-data-breach","status":"publish","type":"post","link":"https:\/\/www.mcafee.com\/blogs\/security-news\/usps-qr-code-scam-health-data-breach\/","title":{"rendered":"Fake USPS QR Code Text Scams and a Major Health Data Breach: This Week in Scams"},"content":{"rendered":"

A new\u00a0scam\u00a0making the rounds takes a familiar delivery trick and upgrades it with hyper<\/span>\u2011realistic messaging and a QR code that looks safe to scan.<\/span>\u00a0<\/span><\/p>\n

But\u00a0don\u2019t\u00a0be fooled.<\/span>\u00a0<\/span><\/p>\n

It\u2019s\u00a0the same delivery\u00a0scam\u00a0playbook scammers have relied on for years, just repackaged with better design and more convincing details.<\/span>\u00a0<\/span><\/p>\n

You get a message with a notice that looks something like this, a real message received by our team and tested against McAfee\u2019s Scam Detector.<\/span>\u00a0<\/span><\/p>\n

\"A
This is an example of the scam message we received, impersonating the USPS.<\/em><\/figcaption><\/figure>\n

 <\/p>\n

That added layer of realism is what makes this version more dangerous. But it\u00a0doesn\u2019t\u00a0hold up under scrutiny.\u00a0<\/span>McAfee\u2019s Scam Detector flagged both the suspicious language and the QR code in this message before any interaction.<\/span><\/b>\u00a0<\/span><\/p>\n

If you receive something like this, pause. Do not scan the code.<\/span>\u00a0<\/span><\/p>\n

You can also protect yourself with McAfee\u2019s Scam Detector, which flags suspicious links and messages, including delivery\u00a0scams\u00a0and QR<\/span>\u2011based attacks, and explains why they may be risky.<\/span>\u00a0<\/span><\/p>\n

What is the USPS QR Code Scam and How Does it Work?<\/span>\u00a0<\/span><\/h2>\n

The USPS QR code\u00a0scam\u00a0is a phishing attempt where scammers impersonate postal services and use QR codes instead of clickable links to direct victims to malicious websites.<\/span>\u00a0<\/span><\/p>\n

Once scanned, the QR code can lead to a fake USPS page that asks for payment, login credentials, or personal information.<\/span>\u00a0<\/span><\/p>\n

How the\u00a0scam\u00a0works<\/span>\u00a0<\/span><\/p>\n\n\n\n\n\n\n\n
Step<\/span><\/b>\u00a0<\/span><\/td>\nWhat happens<\/span><\/b>\u00a0<\/span><\/td>\nThe red flags<\/span><\/b>\u00a0<\/span><\/td>\nWhat to do<\/span><\/b>\u00a0<\/span><\/td>\nHow McAfee helps<\/span><\/b>\u00a0<\/span><\/td>\n<\/tr>\n
1\u00a0<\/strong><\/td>\nYou receive a text about a delivery issue or missed package<\/span>\u00a0<\/span><\/td>\nUrgency,\u00a0you\u2019re\u00a0not tracking a package<\/span>\u00a0<\/span><\/td>\nBe\u00a0skeptical\u00a0of unsolicited delivery messages<\/span>\u00a0<\/span><\/td>\nScam Detector<\/a> flags suspicious messages<\/span>\u00a0<\/span><\/td>\n<\/tr>\n
2\u00a0<\/strong><\/td>\nThe message includes a QR code instead of a link<\/span>\u00a0<\/span><\/td>\nQR codes instead of official tracking\u00a0links\u00a0 is\u00a0a red flag<\/span>\u00a0<\/span><\/td>\nDo not scan QR codes from unknown sources<\/span>\u00a0<\/span><\/td>\nQR scanning protection warns before opening risky destinations<\/span>\u00a0<\/span><\/td>\n<\/tr>\n
3\u00a0<\/strong><\/td>\nYou scan the code and land on a fake USPS page<\/span>\u00a0<\/span><\/td>\nGeneric or slightly off branding on the webpage<\/span>\u00a0<\/span><\/td>\nDo not enter any information<\/span>\u00a0<\/span><\/td>\nSafe Browsing<\/a> blocks known malicious sites<\/span>\u00a0<\/span><\/td>\n<\/tr>\n
4\u00a0<\/strong><\/td>\nThe page asks for payment or personal details<\/span>\u00a0<\/span><\/td>\nRequests for small \u201credelivery\u201d or \u201cprocessing\u201d\u00a0fees\u00a0 are\u00a0not normal<\/span>\u00a0<\/span><\/td>\nExit\u00a0immediately\u00a0and do not\u00a0submit\u00a0anything<\/span>\u00a0<\/span><\/td>\nScam Detector explains why the page is risky, and Identity Monitoring<\/a> supports you when if your info gets out.<\/span>\u00a0<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

What To Do If You Get\u00a0This Message<\/span>\u00a0<\/span><\/h3>\n