Scammers are now mailing sports trading cards posing as gifts, complete with a QR code that promises to verify authenticity.