Have you ever received a package you didn’t order? While it may seem like a harmless mistake—or even a free gift—it could actually be part of a scam.
One common scheme is known as a “brushing scam.” In this type of scam, someone sends an inexpensive item to your address, often using your name without your knowledge or permission. The package may appear to come from a well-known retailer or from a company you have never heard of. Inside, you might find something inexpensive and random, such as toothpaste, baby wipes, seeds, or another small item.
So why would someone send you something you never ordered?
Scammers may use the delivery as proof that a product was delivered to a real person. They can then use your name and information to post fake product reviews online in an effort to improve a seller’s ratings and increase sales.
In some cases, an unexpected package may also contain a note with a QR code. The note may encourage you to scan the code to find out who sent the package or to arrange a return. Do not scan the QR code. It could direct you to a fraudulent website designed to steal personal information, including credit card numbers, usernames, or passwords.
What Should You Do?
If you receive a package you didn’t order, consider taking these steps:
- Change your passwords. Update the passwords for your online shopping accounts, especially if you believe your account information may have been compromised.
- Contact the retailer or online marketplace. If the package appears to have come from a company such as Amazon or another online marketplace, report the suspicious package so the company can investigate the seller.
- Check your credit reports. Review your credit information regularly for unfamiliar accounts or other signs that someone may be using your identity.
- Do not scan unfamiliar QR codes or click suspicious links. These may lead to phishing websites designed to steal your personal information.
- Remember that you generally do not have to pay for or return merchandise you did not order. However, use caution before using any unexpected product since you do not know who sent it or where it came from.
An unexpected package may be nothing more than a shipping mistake, but it can also be a warning sign that someone has access to—or is attempting to obtain—your personal information.
If you believe you have been the target of a brushing scam or another type of fraud, report it to the Federal Trade Commission at ReportFraud.ftc.gov.
Staying alert and taking a few simple precautions can help protect your personal information and prevent scammers from taking advantage of you.