Here’s some valuable advice from the Better Business Bureau about a scam that’s making the rounds that you need to know about to protect yourself. It’s known as a “brushing” scam.
How the scam works
In a “brushing” scam, you receive a package you didn’t order, often without a return address. This is often a setup by unscrupulous companies who found your address online. After the company ships the product to you, it can post a fake, positive review on your behalf to improve its store’s ratings and get more sales.
Reports to BBB Scam Tracker over the last few months show a twist on brushing scams where the package contains a QR code. The code comes with instructions to scan it to find out who sent the package or how to start a return. Scanning the QR code can lead to a phishing website or download malware onto your device.
In a recent BBB Scam Tracker report, a consumer shared this experience: “I received a small package at my door marked UNIUNI from: LEO. This person/company has my name and address. When I googled them the information states this is a brushing scam and that someone has obtained my personal information from either AliExpress, TEMU or Amazon. I have an Amazon account but have not used those other sites. The label has a tracking number, QR code, customer number, and reference number. I have not opened the package, nor do I wish to — this is highly suspicious. I did not order anything from this company/person.”
Free? Maybe, but danger lurks
It might seem like there are no downsides to a free package, but it could be a sign that someone is using your personal information for their own gain. If this happens to you, BBB recommends checking the security of your accounts and notifying the retailer who sent you the package.
What to do if you receive a package you didn’t order:
• Don’t scan QR codes. They might take you to a phishing site that steals your personal information or download malware onto your device.
• Protect your identity. If you did scan the QR code and enter personal information, change your passwords for any compromised accounts and enable two-factor authentication. Also, keep a close eye on your credit reports and credit card bills after you receive the package.
• Notify the retailer. If you can tell where the package is from, go directly to the retailer’s website to get their contact information and report the package as a scam. Retailers like Amazon have policies banning brushing and fake reviews, and they will investigate your report.
• Check for fake reviews. If you can identify the company that sent you the package, look for false reviews in your name and report them to the retailer.
• Pause deliveries. One package is not a huge deal, but some targets of brushing scams are overwhelmed with a flood of unordered packages, creating a serious problem. If this happens, you may want to consider temporarily refusing package delivery at your home address and directing your real orders to a package acceptance service.
• Go ahead and keep the package. The one silver lining of brushing scams is that you get to keep the gift — the Federal Trade Commission says you have a legal right to keep unordered merchandise. Don’t try to return it, especially if there are instructions to scan a QR code or enter information. It could needlessly compromise more of your personal information.
MORE ON SCAMS
- Scammers using A.I., voice cloning to target older Americans
- How to protect yourself from Facebook Marketplace RV scams
- How to avoid scams when buying an RV online
- Beware of private seller RV scams
- Unpaid toll scam targets drivers nationwide
- A growing scam could leave you stuck with a stolen vehicle
RVT1235b
Just got a cheap phone stand that I didn’t order in the mail today. In the past I’ve also received an 8″ electric chainsaw (with no battery or charger) and a knitted beanie. No QR codes and I have no plans to scan any.
Nothing new. This has happened since in the 1980’s. People received packages and then later they received a bill. Postal Service said if you did not order it, then you do not have to pay for it and you can keep it. As it says, if it is not something you know about then keep the package and throw away the box without doing anything.
I received a MaxxAir Standard RV and Trailer Roof Vent that I never ordered and don’t know where it came from. Kept it for a while, then when I installed a fan in my RV vent I used it.