Kannur: Fraudulent “prize letters” are now arriving by post, complete with full residential addresses. Be warned that scanning the QR code inside these letters can result in your bank account being emptied. The letters are reportedly originating from Delhi, with around 30 such envelopes already received at various post offices in Kerala. Even minor local landmarks are included in the address, making them appear highly authentic.

The letters are printed in both Malayalam and English and arrive in a postal cover. Similar postal scams had occurred during the COVID-19 period five years ago.

The letter claims to be from a private company in Delhi, celebrating its 20th anniversary with a lucky draw. It informs the recipient that they have “won” ₹2.85 lakh in a mobile number draw and that the prize is intended for the person at the letter’s address. It also promises a gold ring weighing four grams as an additional reward.

A scratch card enclosed with the letter claims to offer more prizes. The gold ring is said to be delivered by post, and the cash prize can supposedly be credited directly to a bank account once the recipient provides their account details. For this, the letter instructs recipients to scan the QR code.

However, scanning the code is where the scam unfolds – your bank account details are likely to be leaked, potentially leading to financial loss.

There have been previous incidents where scammers sent similar letters using the names of online retail companies, extracting full addresses from leaked data. Those letters, sent via speed post, had led to widespread data breaches involving customers’ bank details. The use of such highly specific full addresses is evidence that fraudsters are operating with access to leaked consumer data.