CORTLAND, NY (607NewsNow) – Beware of the latest holiday scams.

The “brushing” scam involves receiving a package you didn’t order with no return address. Inside is a gift, commonly jewelry, a Bluetooth speaker, or a similar-sized item, with a QR code to scan that claims it will tell you who sent the package.

However, once you scan the code, it sends everything on your phone to the scammer, including any saved bank account or credit card information.

No local complaints of the scam have been received, but the Cortland Police Department urges residents to remain vigilant and never scan an unknown QR code.