Beware the Brush! The Shocking Package Scam Targeting Your Home

What is 'brushing'? the sneaky online scam explained

Have you received a random package at your doorstep containing a cheap, seemingly worthless item? You might be a victim of “brushing,” a rapidly growing global scam that's putting consumers and authorities on high alert. This deceptive tactic involves sellers sending unsolicited products to real addresses, unbeknownst to the recipient. It's more than just a weird gift; it’s a calculated scheme with serious consequences for your data and online security.

How does brushing work? inflating sales and tricking buyers

The core of the brushing scam lies in boosting sales and manipulating online marketplaces. Dishonest sellers purchase or obtain lists of real addresses and send inexpensive or valueless items. Once delivery is confirmed on platforms like Amazon or AliExpress, they generate fake positive reviews using the associated addresses and accounts. This creates a false illusion of popularity and trustworthiness, misleading other buyers into thinking the products are highly-rated and frequently purchased – the exact opposite of reality.

The pandemic's role: a perfect storm for brushing

The surge in online shopping during the COVID-19 pandemic created the ideal conditions for this scam to flourish. With a massive influx of online shoppers, combined with globalized shipping and ease of international transactions, scammers saw an opportunity. They could cheaply send millions of packages to real addresses, building a network of fake sales while exploiting lax platform verification systems. Many users remain unaware they've become part of this elaborate scheme.

Your personal data at risk: beyond a random package

Receiving an unsolicited package isn't just an annoyance; it’s a red flag. Scammers obtain real addresses, often through data breaches or the dark web. This exposes you to serious risks, including identity theft and financial fraud. They’re using your address to build credibility for their fake reviews, and in doing so, they’re compromising your personal security. Be extremely cautious!

Malicious qr codes and phishing links: a dangerous twist

The brushing scam has evolved. Now, some packages contain malicious QR codes or links to fraudulent websites. Scanning these codes or clicking the links could infect your device with malware or lead to phishing attacks designed to steal your banking information. Never scan unknown QR codes or click links from unsolicited packages – it’s a potential gateway to serious harm.

Protect yourself: how to spot and avoid brushing scams

• Verify Unsolicited Packages: Contact the retailer or shipping company to confirm if you actually ordered the item.
• Don't Scan Codes or Click Links: Be wary of QR codes or website links within the package.
• Monitor Your Accounts: Regularly check your online accounts for suspicious activity or reviews you didn't write.
• Report Suspicious Packages: Notify the platform and delivery service immediately about any unexpected deliveries.