Finding an unfamiliar package on your doorstep could have a dangerous downside.
A surprise delivery might seem like a stroke of luck, but experts warn that it could actually cost you. Receiving an unexpected package might be a sign that your information was used in a brushing scam, according to the Better Business Bureau (BBB). In this new type of scam, sellers on Amazon or other shopping platforms will inflate their ratings by shipping products to an unsuspecting victim and posting a fake review in the victim’s name.
“It can be disconcerting to receive an unsolicited package, especially since they are often sent from overseas,” says Alex Hamerstone, a director with security consulting firm TrustedSec. Most of the time, you are not in any immediate danger, but it does mean that bad actors have access to your personal information, including your name, address, and even phone number. Other online scams like gift card scams, Amazon email scams, area code scams, and four-word phone scams can also put your personal information at risk.
So, should you be worried if an unexpected package shows up at your doorstep? We asked experts to weigh in on what a brushing scam is, how dangerous it could be, and what you should do if you receive a package you didn’t order. On the flip side, if you think your Amazon package was stolen, this is what you should do and how tostop porch pirates for good.
What is a brushing scam?
In a brushing scam, an online retailer sends people items and products they didn’t purchase in order to fraudulently improve their store’s ratings. Creating a fake transaction and mailing the item to a random person gives the seller credit for a sale, which boosts that seller’s rating on online marketplaces like Amazon. They may also write a fake positive review of the item in the recipient’s name to increase their rating even more. “The intention is to give the impression that the recipient is a verified buyer who has written positive online reviews of the merchandise,” says Eva Velasquez, president and CEO of the Identity Theft Resource Center (ITRC).
The term brushing comes from a translation of the Chinese word for cleaning, according to Hamerstone. “[It’s] similar to how in English we talk about money laundering even though it has nothing to do with detergent and washing machines, because it makes the illicit money ‘clean,'” he explains. “The term brushing is used because the transaction is ‘cleaned.'”
Is brushing illegal?
Brushing scams are illegal in the U.S. and many other countries, according to the United States Postal Inspection Service (USPIS). But since most brushing scams are committed by overseas sellers, it’s often too difficult for U.S. authorities to track down these criminals. “The much bigger risk to the perpetrators is being banned from selling platforms like Amazon and eBay, which would affect their ability to earn a living,” Hamerstone says. Amazon and other online marketplaces prohibit brushing scams, so reporting the incident to the platform is the best way to hold that seller accountable, he adds. While online shopping sites have tried to crack down on fraudsters, shoppers should still watch out for the scams that can pop up on Facebook Marketplace, eBay, and Amazon.
Is brushing dangerous?
If you receive an item you didn’t order, it could mean that your personal information was compromised in a brushing scam. Scammers might have purchased your information from a database of compromised accounts on the Dark Web, which could leave you vulnerable to other crimes like identity theft in the future, according to Velasquez. On the other hand, fraudsters can often find this information on public data broker sites for free. “Whether we like it or not, our names and addresses are widely available in public and private databases all over,” Hamerstone says. “A scammer usually just needs the kinds of information available in a phone book to run a brushing scam.” Either way, you can protect your information online by following these tips to outsmart scammers.
What should I do if I receive a package that I didn’t order?
First, check the package to see if it was delivered to you by mistake. “If a package is addressed to your neighbor and delivered to you by accident, it isn’t yours to keep,” Hamerstone says. You can choose to keep or discard an unsolicited package addressed to you, or you can try to return it to the sender if a return address is listed.
In addition, Hamerstone recommends monitoring your credit card and bank accounts to make sure you weren’t charged for the item, and notifying authorities if the package contains anything suspicious. Victims can report brushing scams to the BBB Scam Tracker or contact the Identity Theft Resource Center to speak with expert advisors, according to Velasquez. However, “the most effective thing you can do is report it to the platform [such as Amazon or eBay], as the platform is most likely to be able to take action,” Hamerstone says. When you file a fraud report with the platform, you can also request that they remove the fake review written in your name, if there is one.
How can I protect myself from brushing scams?
Whether you are the victim of a brushing scam or want to prevent it from happening to you, there are steps you can take to protect your personal information going forward. Velasquez suggests changing your account passwords with unique 12-plus-character passphrases and frequently checking your financial accounts for any suspicious activity. “This is why good cyber-hygiene and online account management are so important,” Velasquez says. “The better you protect your personal information, the less damage an identity criminal can do.” As you reset your passwords, avoid these password mistakes that hackers hope you’ll make.
Next, read up on what doxxing is and how it can set you up to be hacked.
Sources:
FAQs
“Brushing” is when a scammer finds a consumer's personal information and ships goods that they did not order. The fraudster then writes reviews in the recipient's name with the objective of falsely boosting the ratings or reputation of a company.
How do I report an unsolicited package or brushing scam? ›
Report the scam to the Federal Trade Commission online or by phone at (877) 382-4357.
Why did I get a message about a package I didn't order? ›
When a customer receives a package they didn't order, it may be a scam called "brushing". "Brushing" scams occur when bad actors send packages to publicly available names and addresses. If you receive a package, or item, that you didn't order: Confirm it's not a gift to you.
What to do if you receive an unsolicited package? ›
Unsolicited Merchandise
- If you have not opened the package, mark it “Return to Sender.” The Postal Service will send it back at no charge to you.
- If you open the package and don't like what you find, throw it away.
- If you open the package and like what you find, keep it — free.
Report the scam
The Better Business Bureau recommends that you contact the retailers if you are involved in a brushing scam. If the packages you didn't order arrived from Amazon, then, contact Amazon's customer service department. Amazon can then perform an investigation and take action against the scam company.
Why am I getting random packages in the mail? ›
A surprise delivery might seem like a stroke of luck, but experts warn that it could actually cost you. Receiving an unexpected package might be a sign that your information was used in a brushing scam, according to the Better Business Bureau (BBB).
Is it illegal to keep a package wrongly delivered to you? ›
You have the legal right to keep it as a free gift, according to the Federal Trade Commission (FTC). Sellers aren't permitted to ask for payment for unordered items, either, and the FTC says consumers are under no obligation to even tell the seller about the wrongly delivered merchandise.
Can I keep an Amazon package that was delivered to me by mistake? ›
Can I keep Amazon packages delivered to my house by mistake? Credit: Amazon Yes, you can!
How do I stop Brushing Amazon? ›
What can you do? Notify the retailer. Brushing and fake reviews are against Amazon's policies, so contact Amazon Customer Service if this happens to you and the product appears to come from Amazon. They will investigate and take action on the bad actor.
How do I stop fake package messages? ›
Type in “block” using your device's search function. For Android phones, look for the three dots in the top right-hand corner of your text. Click on it and select “People” and “Options.” Next, select “Block” to stop receiving spam text messages from that number.
If you get a package you didn't order in the mail, you shouldn't open it. Packages are sometimes dropped off at the wrong location, so you might receive a package that's meant for someone else. But if you get a package you didn't order and see your name and address on the box, you should avoid opening it.
Can you open a package that has your address but not your name? ›
No, you cannot. If it is addressed to somebody else with the wrong address (yours) but the correct name (theirs), it would be theft by conversion.
Can you refuse a package and return to sender? ›
After delivery, an addressee may mark a piece of mail “Refused” and return it within a reasonable time if the mail or any attachment is not opened, except for mail listed in 611.1c(1) and 611.1c(2). Mail that may not be refused and returned unopened under this provision may be returned to the sender only if enclosed in ...
Can you get in trouble opening a package that isn't yours? ›
The short answer is “yes.” Opening or destroying mail that is addressed to someone else is a crime called “Obstruction of Correspondence.” It is a serious felony that could lead to prison time. It is remarkably easy to find yourself charged with this crime, even if you didn't mean to do anything wrong.
How do I know if I am being scammed on Amazon? ›
How to tell if it's an Amazon scam (and what to do): Legitimate Amazon sellers never direct shoppers off the platform for payment. If a seller requests payment via a third-party app — like Zelle, Western Union, PayPal, or MoneyGram — it's a red flag. Don't make any payment, and end all communications with the seller.
Will Amazon refund you if you get scammed? ›
You are eligible to receive up to $2,500 of the purchase price, including shipping charges. You can file an A-to-z Guarantee claim after you've contacted the third-party seller and have provided the third-party seller one calendar day to address the issue.
How do you know if a seller is scamming you on Amazon? ›
Look at Seller Feedback
The seller feedback section can be very revealing – if there are multiple reviews claiming the product never arrived, looked counterfeit, etc. this is a sign to avoid purchasing from the seller.
What are the signs of a suspicious package? ›
Suspicious packages
- Unfamiliar return address or none at all.
- Strange odour or noise.
- Protruding wires.
- Excessive postage.
- Misspelled words.
- Addressed to a business title only (e.g. President)
- Restrictive markings (e.g. Do not X-ray)
- Badly typed or written.
Common Characteristics of Suspicious Packages
Package is rigid, bulky, or has excessive tape/string. Poor handwriting, misspellings, improperly addressed. Excessive postage, no postage, or no/strange return address. Ticking, vibration, abnormal sounds, strange odors.
Can USPS open suspicious packages? ›
Unlike in criminal investigations, the ANP program does not require postal inspectors to obtain search warrants to open detained packages. Rather, they request consent from mailers or addressees to open detained packages. If there is no response after 21 days, packages are declared abandoned and can be opened.
Identifying the Sender
Visit USPS.com and submit the tracking number. The tracking system may only provide you with the city, state and zip code of the sender, but this may be all the information you need to determine the sender's identity.
What happens if you receive someone else's package? ›
If you get mail that doesn't belong to you, then you should not open it. Don't throw it away, either. Instead, take the mail to the correct recipient or write “return to sender” on the package or letter. You can also return it to the post office directly.
How do I return a UPS package that is not mine? ›
Next is, UPS misdelivers the package, you see that it is not yours, you have a few options:
- call the rightful recipient and tell them you have it.
- call UPS and tell them it was misdelivered, and they will either pick it up and take it to the correct address, or ask you to drop it off at the closest UPS station.
If a customer hasn't received their goods, they'll receive a refund for the cost by submitting an Amazon Stolen Package Claim. This guarantee also applies to damaged or inferior products received as well.
How can I tell who sent me an Amazon package? ›
Amazon is very cautious about handing out personal information, and just receiving a package does not entitle you to know who sent it. This would be considered sensitive data, because it provides information about the person's buying trends, and if the buyer has chosen to remain anonymous, they may not appreciate this.
Can you refuse to accept an Amazon package? ›
If your order shipped directly from Amazon and can't be modified, you may refuse the package or return it using our Online Returns Center. If your order shipped directly from a seller and can't be modified, please contact the seller for instructions.
Is there an alternative to brushing? ›
Floss is a great alternative to brushing your teeth when you are on the go. Floss will help you to remove bacteria and food particles in the hard to reach areas around your gums and stuck in between your teeth. Using scented floss will help to freshen your breath as well.
What happens if you open a text from a scammer? ›
Don't “click” open links in unsolicited text messages. Clicking the link may infect your mobile device with a virus or malware designed to steal the personal or financial information stored on the device. Don't call a telephone number listed in an unsolicited text message.
Can you get scammed by opening a text message? ›
Text scams (also known as “smishing”) are among the most common tactics scammers use to steal personal information. Last year alone, scammers sent out 87.8 billion spam text messages and defrauded victims of over $10 billion [*]. If you've received a suspicious text, don't respond, click on links, or call any numbers.
What happens if you text a scammer back? ›
Directly replying to a spam text message lets a spammer know that your number is genuine. What happens next They can sell your phone number to other spammers who might bombard you with false promises of free gifts and product offers. Instead, it's best to block and report the number.
Your Rights When You Get Unordered Merchandise
By law, companies can't send unordered merchandise to you, then demand payment. That means you never have to pay for things you get but didn't order. You also don't have to return unordered merchandise. You're legally entitled to keep it as a free gift.
Can I pickup a package that's not in my name? ›
Can a customer have someone else pickup their held mail? If picking up mail for someone else, the customer needs written authorization (and their own photo ID).
How can someone ship something to me without my address? ›
How To Receive A Package Without Giving An Address: 4 easy ways for 2022
- Package receiving service. A package receiving service is a great way to get items delivered without using your home address. ...
- Package locker systems. ...
- Sign up for a PO Box. ...
- Get your parcel delivered to a friend (or your office)
You can your package without a name or you can put any nickname on the package if you have the delivery address to a house. If you live in an apartment building, and the package has your address but a different name, the driver may not be able to find you.
Who pays for refused mail? ›
Many postal customers believe that they may accept, open and then refuse a parcel marked "Return Service Requested”. The placement of the return service endorsem*nt on mailpieces constitutes, in part, a pledge by the sender that they will pay return postage if the pieces are refused by the addressee.
Can you mark return to sender on a package? ›
If the item does need to be returned to the sender, your nearest Post Office will sort this out. You do not need to write a “Return to sender” message on the packaging. Remember, you should not cover or cross out the address either.
Why would a package be returned to the sender? ›
Possible reasons for return include, but are not limited to: Shipment being refused by the intended receiver. Physical address not able to be found by UPS. Unable to deliver after multiple delivery attempts.
What do I do if I receive a package that I didn't order? ›
If you receive a package that you did not order and is not a gift, report it immediately. When a customer receives a package they didn't order, it may be a scam called "brushing". "Brushing" scams occur when bad actors send packages to publicly available names and addresses.
Does return to sender work? ›
With return to sender, a mail carrier will pick up the mail item, whether it's delivered to the wrong address or person or rejected, and send it back to the sender.
Can you open mail with your address but someone else's name? ›
A federal statute known as 18 USC Section 1702 makes it illegal to open correspondence addressed to someone else. However, the law cannot be applied if you did not recognize that the mail was not yours when you opened it.
Why is it called brushing? There was a practice of sellers paying fake buyers to buy their products and write reviews or just mark as popular, to improve sellers' position on ecommerce sites. These fake buyers were called brushers. Ecommerce retailers have tried to fight these practices.
How do I know if the sender is legit? ›
7 Ways to Tell if an Email is Fake
- The email in question is not from a company domain. ...
- You received a verification email for an application, account, email list, etc… that you didn't sign up for. ...
- Spoofed or masked names and/or email addresses. ...
- The domain is misspelled. ...
- The entire textbox within the email is a hyperlink.
When you brush your teeth, you help remove food and plaque — a sticky white film that forms on your teeth and contains bacteria. After you eat a meal or snack that contains sugar, the bacteria in plaque produce acids that attack tooth enamel.
How do I stop brushing Amazon? ›
What can you do? Notify the retailer. Brushing and fake reviews are against Amazon's policies, so contact Amazon Customer Service if this happens to you and the product appears to come from Amazon. They will investigate and take action on the bad actor.
How do you know if a scammer texted you? ›
The text message is unsolicited (scammers will always contact you out of the blue). The text sender has a long phone number (10 or 11 digits). The phone number is “spoofed” (i.e., it looks like it's coming from someone you know or trust). The text includes a link that is most likely shortened or scrambled.
What can a scammer do with my email? ›
With just your email address, scammers can:
- Target you with sophisticated phishing emails.
- Find more sensitive information about you — including where you live.
- Attempt to hack into your other online accounts.
- Impersonate you and scam your friends and family.
- Steal your identity and commit financial fraud.
The SLAM acronym can be used as a reminder of what to look for to identify possible phishing emails. The SLAM acronym stands for sender, links, attachments, message. Sender: when hackers send phishing emails, they often mimic a trusted sender's email address to trick recipients into opening the email.
