ADSHEET #8™

HOME - READ ADS - POST ADS - MENU

That unexpected package you got could be a brushing scam

By BCP Staff

August 20, 2026

Did you get a package you didn’t order? It could be a brushing scam where a scammer uses your name to leave a fake review for that package you didn’t order. It could also be a sign that someone has (or is looking to steal) your personal information.

It starts with an unexpected package that looks like it’s from a known company like Amazon, or from a person or business you’ve never heard of. The package is addressed to you and recent reports to the FTC say it usually has something cheap and random inside, like baby wipes, toothpaste, or seeds.

Why would someone send you that? Scammers do this so they have “validation” of delivery. Then they use your name to place fake reviews online about their business to “brush up” their sales.

Sometimes, the sender might leave a note with a QR code inside the package. It might say to scan to find out who sent the package, or to process a return. But scanning could take you to a phishing website designed to steal information like your credit card numbers, usernames, or passwords.

If you got a package you didn’t order:

Change passwords on all your online shopping accounts in case they were compromised. If the package came from Amazon or another online marketplace, message the platform so they can investigate removing the seller.

Check your credit and look for signs of identity theft.

Know that the law says you don’t need to return things you didn’t order. And you don’t have to pay for them, either. But be cautious about using the product. After all, you don’t know who sent it.

This report was prepared by the U.S. Bureau of Consumer Protection Staff and is in the public domain.