Receiving an unexpected delivery package at your doorstep may initially seem like a stroke of luck, almost like a “gift from the heavens” or a pleasant surprise. However, before you jump for joy, it’s essential to exercise caution, as you might have stumbled upon a scam known as “brushing.”
During the festive season of Christmas and New Year, whether receiving gifts from family and friends or parcels from online orders, it’s crucial to be wary of packages with unclear origins. These are packages you did not order yourself nor were sent from known addresses. Particularly suspicious are those without a shipping address but require you to scan a QR code using your phone for confirmation. These might not be instances of serendipity but rather indications of falling into a scam involuntarily.
The deceptive practice known as “brushing” has been around for years, with scammers employing various tactics. Law enforcement agencies across the United States have been issuing warnings on social media platforms to alert the public about these fraudulent activities.
The Federal Trade Commission (FTC) released a statement in 2020 explaining the workings of brushing scams: “Receiving unordered merchandise is a tactic used to generate positive reviews under your name on retail websites. While it may seem like a nuisance at first, this could lead to more severe consequences. This could mean the scammers have created accounts using your personal information and taken control of your accounts.”
At first glance, individuals receiving unordered packages may not consider themselves “harmed” by the scam since they get to keep the free products. Some even label brushing scams as “victimless” crimes. However, these products are typically unwanted items with low value, such as ping pong balls or inexpensive flashlights.
Furthermore, the fact that scammers have gained access to and used your personal identity signifies a severe breach. Identity theft can result in various consequences, ranging from leaving comments online under your name, unauthorized access to your email and social media accounts to even applying for loans in your name.
Moreover, businesses benefiting from fraudulent positive reviews by using brushing tactics are undoubtedly shady. Having your name used for false endorsements and promoting their products can damage your reputation and unwittingly involve you in fraudulent activities. Other consumers relying on exaggerated positive reviews might make erroneous purchasing decisions based on your manipulated feedback.
Another scam involves receiving a package with no return or shipping address, only a QR code. Instructions suggest scanning the code with your phone to reveal the sender. However, scanning the QR code might redirect you to a website prompting you to enter personal information, akin to phishing scams. In some cases, malicious QR codes could install malware on your device to harvest information without your knowledge.
QR code-related scams are nothing new, but with the increasing use of QR codes for various services like reading menus at restaurants or paying for parking, caution is advised. The FTC issued a warning in 2023 urging individuals not to scan QR codes on unordered packages, emphasizing the potential risks involved.
Similarly, the US Postal Inspection Service issued warnings, cautioning customers against responding to text messages claiming “lost or unordered package tracking information.” These messages, appearing to be from reliable sources, could be forms of phishing aiming to deceive consumers into revealing personal or financial information.
The Better Business Bureau recommends promptly reporting such incidents to e-commerce platforms, predominantly Amazon, known for brushing scams. Additionally, requesting the removal of false reviews published under your name on their websites is essential.
Melanie McGovern from the Better Business Bureau advises, “Begin by notifying the online retailer about receiving such packages, checking your account for any unauthorized orders, and changing your password.”
Consumers are encouraged to report these activities to the Better Business Bureau’s Scam Tracker to help prevent such scams at www.bbb.org/scamtracker.
Given the prevalence of brushing scams, Amazon has explicitly stated, “Third-party sellers are prohibited from sending unsolicited packages to customers. Actions will be taken against violators, including withholding payment, suspending sales privileges, and reporting misconduct to law enforcement.”
An Amazon spokesperson highlighted, “Customers are not required to return unsolicited items.”
Furthermore, it’s prudent to review your credit card statements and monitor your bank account for any unusual fund transfers. While your bank account information may not have been compromised yet, it’s always advisable to double-check for added security when personal information is involved.