Vietnam police warn of Mid-Autumn Festival QR code scams

Police in Hanoi and Hung Yen are warning citizens about sophisticated cybercrime tactics involving fraudulent Mid-Autumn Festival gifts. Scammers are sending professional-looking parcels, such as mooncakes, vouchers, or thank-you cards, to victims' addresses to build trust. These packages often contain QR codes with instructions to “scan to authenticate gifts” or “receive vouchers.”

Scanning these codes can lead victims to fake websites designed to mimic banks or e-commerce platforms, where criminals attempt to steal personal identification, login credentials, and OTP codes. In some cases, victims are directed to download malicious applications that allow remote device control or data theft. Other variations include requesting upfront payments for “shipping fees” or “activation fees” before cutting off contact.

Another psychological manipulation tactic involves scammers posing as legitimate distributors on social media. They build rapport through detailed product consultations and small, successful transactions to create a false sense of security. Once trust is established, victims are lured into group chats where fake accounts simulate successful payouts, eventually tricking the target into depositing large sums of money under the guise of “rescuing cash flow” or “increasing product orders.”