Unexpected Packages You Never Ordered Are Part of a "Brushing" Scam
You get a package you never ordered, addressed to you, from a company like Amazon or a seller you have never heard of. Inside is something cheap and random — baby wipes, toothpaste, or seeds. Scammers send these to "validate" that your name and address work. Once delivery is confirmed, they use your name to post fake reviews about their business online, "brushing up" their sales and ratings.
The risk goes beyond the free item. Some packages include a note with a QR code asking you to scan it to find out who sent the package or process a return — scanning can take you to a phishing site that steals credit card numbers, usernames, and passwords. And an unrequested package can be a sign that someone has, or is looking to steal, your personal information. You do not need to return anything you never ordered, and you do not have to pay for it.
What to look for
- An unexpected package addressed to you that you did not order, containing something cheap and random (baby wipes, toothpaste, seeds)
- A package that appears to come from a known marketplace like Amazon but is from a seller you have never heard of
- A note inside with a QR code telling you to scan it to find out who sent the package or process a return
- Fake product reviews posted under your name on an online store