That unexpected package you got could be a brushing scam

Did you get a package you didn’t order? It could be a brushing scam where a scammer uses your name to leave a fake review for that package you didn’t order. It could also be a sign that someone has (or is looking to steal) your personal information. It starts with an unexpected package that looks like it’s from a known company like Amazon, or from a person or business you’ve never heard of. The package is addressed to you and recent reports to the FTC say it usually has something cheap and random inside, like baby wipes, toothpaste, or seeds. Why would someone send you that? Scammers do this so they have “validation” of delivery. Then they use your name to place fake reviews online about their business to “brush up” their sales. Sometimes, the sender might leave a note with a QR code inside the package. It might say to scan to find out who sent the package, or to process a return. But scanning could take you to a phishing website designed to steal information like your credit card numbers, usernames, or passwords. If you got a package you didn’t order: Change passwords on all your online shopping accounts in case they were compromised. If the package came from Amazon or another online marketplace, message the platform so they can investigate removing the seller. Check your credit weekly for free at AnnualCreditReport.com . Monitor the information in your credit report and look for signs of identity theft . Know that the law says you don’t need to return things you didn’t order . And you don’t have to pay for them, either. But be cautious about using the product. After all, you don’t know who sent it. If you spot a brushing scam, tell the FTC at ReportFraud.ftc.gov .