Ever wondered why seemingly harmless Amazon packages are suddenly landing on your doorstep with no sender name, no return address—just a mysterious QR code tucked inside, inviting you to scan it?

Scanning a QR code can expose you to identity theft, according to the Federal Trade Commission. Quick-response, or QR codes, which store links and other information and are readable by a smartphone ...