FIGURES
- FTC: A QR code in a package you didn't order could take you to a phishing website or install malware. The law says you can keep the item as a gift. Source: Federal Trade Commission, consumer alert, 23 Jan 2025, https://consumer.ftc.gov/consumer-alerts/2025/01/scam-alert-qr-code-unexpected-package
- FTC: If you receive a brushed package, message the platform so it can investigate the seller, and change your shopping-account passwords. Source: Federal Trade Commission, consumer alert on brushing, 20 Aug 2026, https://consumer.ftc.gov/consumer-alerts/2026/08/unexpected-package-you-got-could-be-brushing-scam
- USPIS: By law you may keep unsolicited merchandise and are under no obligation to pay for it. Source: US Postal Inspection Service, 24 Mar 2025, https://www.uspis.gov/news/scam-article/brushing-scam

DEMAND SIGNALS (vidIQ, 25 October 2026)
- Local news reports on "brushing" broke out at 746 and 985 times their channels' averages, with 519,000 and 198,000 views (vidIQ).
- "QR code scams" draws about 6,500 searches a month, and a QR warning reel from an Instagram creator reached 921,000 views (vidIQ).