Got an Unexpected Package? It’s Likely A Scam

Online purchase delivery service concept Cardboard parcel box delivered outside the door Parcel on the door mat near entrance door 3d rendering

What are Brushing Scams and How to Avoid Them

 "Whichever friend sent us (insert the lovely, unexpected gift) to our house, thank you so much! We don't know who you are, so please let us know so we can thank you properly!"

Have you seen a friend post something similar on Facebook, or maybe even yourself, in recent years? Most of the time, no one ever steps forward claiming they sent the gift. That's because a scammer is likely the mastermind.

What is a Brushing Scam?

An unexpected package is delivered, most of the time from a third-party seller on online marketplaces like Amazon or eBay. There usually is no return address or information on who sent the package. Sometimes, there is a QR code to scan to see who sent it — NEVER scan the QR code. It can lead the scammer to your personal information and make you vulnerable to identity theft. When you dive deeper into the package, you'll typically find low-value items like flashlights, kitchen gadgets, and hair ties. The second part of the scam consists of the seller leaving a fake positive review for their products in your name. This tactic is used to boost their seller rating/ranking, leading unsuspecting consumers to purchase from a scam company based on those reviews. Reviews are like gold to businesses in today's world, after all.

So, What's the Problem?

Although a brushing scam may appear harmless (you are getting free stuff!), your personal information has likely been compromised. This can often lead to identity theft and other forms of fraud. Also, boosting the seller's ratings and reviews leads to other consumers falling victim to the scam.

Receive a Unexpected Package?

According to USPS and the FTC, if an unanticipated package arrives at your doorstep:

  • Update passwords: Any online shopping account you have should be updated in case they were compromised.
  • Do not scan any QR codes: Scanning a QR code included with the package (often disguising as a way to find the sender) often leads to malware taking over your device, putting sensitive information at risk. Do not contact the sender for any reason.
  • Monitor your credit report and accounts: Keep an eye out for suspicious activity using IDProtect®.
  • Throw away or keep items — Never pay for the items: It is up to you whether you keep or toss the item(s) sent. By law, you may keep unsolicited merchandise and are under no obligation to pay for it.
  • If delivered via USPS — Return to Sender: If the package is marked with a return address and unopened, you may mark it “RETURN TO SENDER, and USPS will return it at no charge to you.
  • Report the Scam: Report the fraud to the FTC, BBB, and the retailer (Amazon, eBay, etc.), and ask the company to remove any fake reviews left in your name.

Brushing scams may seem like harmless pranks at first, but they’re part of a larger scheme that can put your personal information and online reputation at risk. By staying informed and vigilant, you can protect yourself and your data.