Strange packages you didn't order showing up on your doorstep. I got this strange package in the mail. It's addressed to me. Never ordered it, so I'm like, Is this *** scam? There was an envelope that says, Thank you for your purchase, and I haven't ordered anything. It's often an e-commerce scam called brushing. The goal boosting *** seller's ratings by creating fake orders. The scammer uses your address to mail you something you didn't ask for, usually something cheap. And lightweight that's easy to ship. Then they go online and create *** fake review. But now both the Federal Trade Commission and the Better Business Bureau are out with warnings about *** dangerous new twist. And here it is scammers putting something like this in your package, *** QR code. There's instructions like scan this QR code to see who exactly sent you your package, but stop right there. Don't do that. That is exactly how they get you. When you scan the QR. Code it usually takes you to *** fraudulent website where they try to fish for more information out of you like your bank or credit card information or even your Social Security number, but ultimately it's *** scam. We reached out to Melanie McGovern with the Better Business Bureau. We just encourage consumers don't scan any kind of QR code that comes in *** package you didn't order. She tells us that BBB received several reports of QR codes in unsolicited packages since December. So how did the scammers Find your address in the first place. There's so much information that's out there that, you know, as much as we like to think we're safe online, our addresses are out there. There's been so many data breaches. Even if you get one of these packages and you see the QR code and you didn't scan it, it's really important to report it to BBB as well. Who else should you alert? If you can tell where the package came from, like Amazon or Walmart, for example, contact them directly and report the package as fraud. Both of those retailers and other Legitimate ones have rules against fake reviews. You can also report the fraud to the US Postal Service, FedEx, or UPS, whoever fulfilled the delivery. Finally, keep *** close eye on your banking accounts and your credit reports because at *** minimum, *** scammer was able to obtain your address. So what do you do with the package itself? The Federal Trade Commission says you are legally allowed to keep it. You can do that or really just throw it out. Reporting in Washington, I'm Amy Lowe.