Federal Trade Commission
WASHINGTON — Did you get a package you didn’t order? It could be a brushing scam where a scammer uses your name to leave a fake review for that package you didn’t order. It could also be a sign that someone has (or is looking to steal) your personal information.
It starts with an unexpected package that looks like it’s from a known company like Amazon, or from a person or business you’ve never heard of. The package is addressed to you and recent reports to the FTC say it usually has something cheap and random inside, like baby wipes, toothpaste, or seeds.
Why would someone send you that? Scammers do this so they have “validation” of delivery. Then they use your name to place fake reviews online about their business to “brush up” their sales.
Sometimes, the sender might leave a note with a QR code inside the package. It might say to scan to find out who sent the package, or to process a return. But scanning could take you to a phishing website designed to steal information like your credit card numbers, usernames, or passwords.
If you got a package you didn’t order:
If you spot a brushing scam, tell the FTC at ReportFraud.ftc.gov.