Receiving an unexpected package at your doorstep can be a pleasant surprise, but when the delivery is from an unknown sender and you did not make a purchase, it may be a sign of a fraudulent activity known as a brushing scam. This phenomenon involves unsolicited goods being delivered to individuals, often through online marketplaces like Amazon, with the intent to manipulate seller ratings and reviews. While the items themselves are typically free to the recipient, the practice raises significant concerns about data security and consumer protection. This article explores the mechanics of brushing scams, the potential risks to consumers, and the recommended steps to take if you receive such a parcel. The information is based on reports from consumer protection agencies, postal services, and security experts.
A brushing scam is a deceptive practice employed by unscrupulous third-party sellers on e-commerce platforms. The scheme involves sending unordered merchandise to individuals, often lightweight and inexpensive items such as headphones, screen protectors, candles, Bluetooth speakers, seeds, or face masks. The primary objective is to create the illusion of a verified purchase and a genuine customer review. By using a recipient’s address, which is often obtained from publicly available data or online listings, the seller can mark the item as "delivered" and then post a fake positive review in the recipient’s name. On platforms like Amazon, reviews from verified purchasers are given greater weight and visibility, so these fraudulent reviews can significantly boost a product’s rating and perceived legitimacy. This artificial social proof can lead to increased sales for the seller, as consumers are more likely to trust products with high ratings and numerous verified reviews. The practice first gained notoriety with "mystery seeds" arriving from China in 2015 and has since become more common in the United States and Canada, with thousands of people reporting such incidents annually.
While receiving a free item might seem harmless, brushing scams indicate a serious breach of personal data. For a seller to send a package to your address, they must have obtained your name and address. This suggests that your personal information has been exposed, potentially through a data breach or by being scraped from online directories. The Better Business Bureau (BBB) warns that this is a "scary downside" to what might appear to be a lucky find. The presence of your address in the hands of a scammer is a warning sign of potential identity theft. Criminals with this information could exploit it in various ways, such as opening credit accounts in your name, changing your mailing address to intercept important documents, or using the data for other fraudulent activities. The BBB notes that brushing scams are "popping up nationwide," with items arriving in boxes that sometimes only appear to come from Amazon or another retailer, often lacking a return address.
The legal and practical response to receiving unsolicited goods varies by jurisdiction. In the United States, the United States Postal Inspection Service (USPIS) clarifies that if you open an unsolicited package and like the item, you may keep it. By law, you are under no obligation to pay for unsolicited merchandise or return it. Amazon’s own guidance aligns with this, stating that if you receive a package you did not order and it is not a gift, you should report it immediately and that you do not need to return the item. However, a secondary scam can sometimes follow. After sending a free consumable product, a company may later contact the recipient, demanding payment and threatening legal action to avoid paying. Consumers are strongly advised never to pay for unsolicited merchandise.
If you suspect you are the victim of a brushing scam, there are several protective steps you should take. Firstly, do not call any phone number that might be linked to the sender, as scammers may attempt to extract sensitive information. Instead, you should notify the e-commerce platform (such as Amazon or eBay) about the unsolicited package. It is also crucial to file a fraud report and request that the company investigate and remove any fake reviews posted in your name. You should monitor your online and financial accounts for any suspicious activity and consider changing passwords for your online accounts, enabling two-factor authentication (2FA) where available. Checking whether your personal information has been exposed in a data breach or on the dark web is another recommended action. If the package contains any suspicious contents, you should notify local authorities. While brushing scams themselves may not directly cause financial loss, they are a clear indicator that your personal information is compromised and requires vigilance.
In conclusion, unsolicited packages from Amazon or other online sellers are not random acts of kindness but are often part of a brushing scam designed to fraudulently boost product ratings. These scams serve as a critical warning sign that your personal information, particularly your name and address, has been exposed. While you are legally entitled to keep the items without payment in many regions, the underlying risk of identity theft and further fraud is significant. Consumers should respond by reporting the incident to the platform, monitoring their accounts, and taking steps to secure their personal data. Awareness and proactive measures are key to mitigating the risks associated with these deceptive practices.
Sources
- Lifehacker: Free Amazon Package Brushing Scam
- MakeUseOf: Amazon Brushing Scam
- Aura: Brushing Scam
- Better Business Bureau: Brushing Scam Indicates a Serious Problem for Victims
- United States Postal Inspection Service: Brushing Scam
- Bitdefender: Brushing Scams – What to Do If You Receive Free Goods in the Mail Without Ordering Them