Authorities in the US are warning people about the rising 'brushing' scam, where people receive unexpected gifts with no return address and a QR code that may lead to phishing sites or malware.