The Federal Trade Commission and Better Business Bureau warn of a new scam involving unsolicited packages containing QR codes that lead to phishing websites.