Empty envelopes are hitting mailboxes. The scam behind them can expose your data, QR codes and bank info if curiosity wins. Stay alert now.