The phenomenon of receiving unsolicited packages from Amazon, often containing lightweight items such as ping pong balls, face masks, seeds, or inexpensive electronics, has been reported across the United Kingdom. While this may initially seem like a welcome surprise or a free gift, it is frequently indicative of a fraudulent activity known as a 'brushing' scam. According to information provided by the Better Business Bureau (BBB) and cybersecurity experts, these scams involve third-party sellers on platforms like Amazon sending unordered merchandise to consumers' addresses. The primary objective behind this activity is not to provide a free sample to the recipient, but to manipulate the platform's review system. The sellers use the recipient's address, which they have likely obtained from publicly available online data, to create a fake order. They then post a fraudulent, positive review under the recipient's name, falsely verifying them as a genuine buyer. This practice artificially inflates the product's rating and visibility, which can lead to increased sales for the seller. The items received are often low-cost and lightweight to minimise shipping expenses for the scammer.
The risks associated with brushing scams extend beyond the receipt of unwanted goods. The BBB highlights that this activity indicates a serious problem for victims, as the scammer has successfully obtained the recipient's personal details, including their name and address. This information could potentially be used to carry out further scams or identity fraud. Furthermore, the presence of unsolicited packages can cause confusion and concern for the recipient, who may be unaware of the source or purpose of the items. It is important to note that while the items themselves are physically harmless, the underlying activity is a violation of Amazon's policies and constitutes a deceptive practice.
In addition to brushing scams, the provided source material outlines several other fraudulent schemes that target Amazon users, many of which are disguised as offers for free goods or discounts. These include 'mystery box' listings, which promise a surprise assortment of items at a steep discount but often result in scams where the received items are of negligible value or nothing arrives at all. Scammers use vague descriptions and fake reviews to make these listings appear legitimate. Another common tactic involves 'unclaimed package' scams, where advertisements on social media or other marketplaces claim to sell unclaimed Amazon packages, promising high-value items or extreme savings. These are typically fraudulent, and consumers may end up with less valuable items than promised or receive nothing.
Other scams involve attempts to deceive users into providing payment or personal information under the guise of a refund or special offer. For instance, 'overpayment' scams involve emails claiming the user has overpaid for an item and must follow a link or provide information to receive a refund. These links often lead to malicious websites designed to steal personal data. Similarly, 'off-platform payment' scams trick users into paying for items outside of Amazon's secure system, using person-to-person payment apps that lack buyer protection, thereby voiding Amazon's A-to-z Guarantee. Phishing variants, such as 'vishing' (voice phishing) and 'smishing' (SMS phishing), involve scammers calling or texting users, pretending to be from Amazon, and attempting to extract sensitive information like payment details or passwords.
To protect against these scams, consumers are advised to take several proactive measures. Enabling two-factor authentication (2FA) on their Amazon account adds a critical layer of security, making it harder for unauthorised users to gain access. Regularly updating passwords and installing reputable antivirus software can also help safeguard personal information. When receiving unsolicited packages, it is advisable not to use the items, as they may be part of a brushing scam. Reporting the incident to Amazon through their official customer service page is recommended. This can be done by logging into the account, visiting the Security & Privacy section, and selecting the option to report something suspicious.
If a user suspects their account has been compromised, such as receiving notifications about packages they did not order, they should immediately secure their account by changing their password and reviewing recent order history. It is crucial to verify that any communication, whether email, phone call, or text message, is from a legitimate Amazon source before responding or clicking any links. Amazon will not request sensitive information, such as payment details or Social Security numbers, over the phone or via email. For any legitimate concerns regarding an account or order, users should always navigate directly to the official Amazon website or app rather than following links from external messages.
Conclusion
The receipt of unsolicited packages from Amazon is a common indicator of a brushing scam, a fraudulent practice where sellers send unordered items to create fake reviews. This activity poses a risk to personal data security. Furthermore, consumers must remain vigilant against a variety of other scams, including mystery boxes, overpayment schemes, and phishing attempts, which often masquerade as offers for free goods or discounts. Protecting oneself involves securing Amazon accounts with strong passwords and two-factor authentication, being sceptical of unsolicited offers, and reporting any suspicious activity directly to Amazon through official channels. By understanding these tactics, UK consumers can better safeguard their personal and financial information while navigating online marketplaces.