Consumer protection bodies are advising people to verify unexpected messages through official channels following reports of tailored postal QR-code letters.