The Mystery Package on Your Porch
It starts with a surprise delivery. You receive a package from Amazon, eBay, or Temu that you didn’t order. Inside is something cheap: a pair of plastic sunglasses, a handful of seeds, or a low-quality phone case. It has your name and address on it, but there is no gift note. This is not a mistake by the post office; it is a “Brushing” scam.
How the Brushing Scam Works
Third-party sellers on massive marketplaces are desperate for “Verified Purchase” reviews. Marketplaces like Amazon rank products higher if they have thousands of 5-star reviews from people who actually received the item.
- The Fake Order: The scammer creates a buyer account in your name. They “buy” their own product and ship it to your real address.
- The Verified Status: Because the shipping carrier confirms the package was delivered to your house, the marketplace marks that account as a “Verified Buyer.”
- The Fake Review: The scammer then writes a glowing, 5-star review under your name. To the average shopper, it looks like a real recommendation from a real person.
The Risks to Your Privacy
While getting “free stuff” might seem harmless, a brushing scam is a major warning sign that your personal data is in the wrong hands.
- Data Exposure: For a scammer to send you a package, they must have your full name, physical address, and sometimes your phone number. They likely bought this information from a data broker or found it in a recent leak.
- The “Quishing” Danger: Modern brushing scams sometimes include a QR code inside the box, claiming you should “Scan for a Gift Card” or to “See who sent this.” These codes often lead to phishing sites designed to steal your Amazon login.
- Account Locking: If a marketplace detects that your identity is being used for fake reviews, they may flag or even ban your legitimate account for “violating community standards,” even though you did nothing wrong.
What to Do if You Get “Brushed”
If unsolicited packages start arriving, follow these steps immediately:
- Do Not Pay: You are legally allowed to keep any unordered merchandise sent to you in the mail for free. Never respond to anyone asking for payment or “return shipping.”
- Report to the Platform: Contact the marketplace (like Amazon’s “Report Unsolicited Packages” page) and give them the tracking number. This helps them shut down the fraudulent seller.
- Change Your Passwords: While they may have just gotten your address from a public list, it is possible they have access to your shopping account. Change your password and ensure MFA is active.
- Notify the Authorities: If the package contains organic matter like seeds or unknown liquids, do not open them. Contact your local postal inspector or agricultural department, as these can be invasive species or hazardous.