QR Code Scam Alert: Pagosa Springs Package Fraud

Pagosa Springs residents are receiving unsolicited packages containing cheap trinkets and QR codes designed to steal passwords and personal information, authorities warn.

The scam arrives as a small package in the mail with a fake Amazon receipt and instructions to scan a QR code to claim a "gift" or process a return. Scanning the code redirects users to fraudulent websites that mimic Amazon, banks, or county login pages. Once victims enter credentials, scammers steal passwords and access accounts.

The QR code can also install malware or spyware directly onto a phone or computer.

Do not scan the code. Legitimate companies do not send mystery gifts requiring QR code scans.

If you scanned the code but entered no information, discard the package. Federal law allows you to keep unsolicited merchandise or throw it away.

If you entered a password after scanning, change it immediately from a secure device and monitor bank and credit card statements for unauthorized charges.

Report the scam to the Federal Trade Commission at ReportFraud.ftc.gov, the U.S. Postal Inspection Service, or the Archuleta County Sheriff's Office.