Have you ever ever acquired a package deal you by no means ordered? It could possibly be a warning signal that your knowledge has been compromised, with extra fraud to observe.
23 Dec 2025
•
,
5 min. learn
World e-commerce gross sales are predicted to exceed $6.4 trillion in 2025. And a big share of those will come through marketplaces. However whereas they ostensibly supply comfort and security for customers and expanded attain for companies, there’s a darker facet to the business. In 2024, Amazon alone proactively blocked over 275 million suspected faux critiques, and took “enforcement actions” towards 1000’s of people.
This underground business has grown to the purpose the place on a regular basis customers may discover themselves unwittingly conscripted into the creation of pretend critiques. The underside line is that this: if an merchandise turns up at your door that you don’t have any reminiscence of ordering, don’t ignore it. Learn on to search out out what it might imply.
What’s a brushing rip-off?
Brushing scams are a sort of e-commerce fraud the place a vendor sends a package deal to an apparently random particular person’s tackle. The merchandise is normally of low worth and isn’t meant as a present of altruism. Somewhat, it’s an try by the vendor to fraudulently inflate the product’s score on e-commerce marketplaces.
It really works like this:
- A scammer will get maintain of a listing of names and mailing addresses — usually listed on cybercrime boards after knowledge breaches, or through folks search websites. They could even scrape this information from publicly accessible sources.
- The fraudster creates a faux purchaser account on an e-commerce platform or market the place they promote their merchandise.
- The fraudster makes use of the account to “purchase” their product on that platform and ships the product to the sufferer’s tackle.
- The scammer makes use of the faux account to submit a 5-star assessment, boosting (or “brushing up”) the merchandise’s status and visibility.
The primary the sufferer normally hears in regards to the rip-off is after they obtain the unsolicited parcel.
What might it imply?
Why would anybody thoughts receiving free items by way of the submit, even when they’re low-cost and light-weight? It’s not as innocent a rip-off because it appears. For one factor, the truth that you’re being focused in a brushing scheme in any respect might imply that your private knowledge is being shared on the cybercrime underground. For one more, the scammers may be testing your particulars are right, in an effort to transfer onto a second stage, which includes extra severe identification fraud.
There are additionally extra malign variations of the scheme the place a QR code is included contained in the package deal you obtain. Scanning it would more than likely take you to a malicious/phishing website designed to put in malware or trick you into sharing extra private data.
Lastly, there’s an oblique price associated to such scams. They slowly and insidiously erode the belief customers place in market/e-commerce assessment programs.
How do I do know if I’ve been victimized?
It shouldn’t take an excessive amount of effort to work out for those who’ve been singled out by brushing scammers. For those who obtain a low-value, poor high quality merchandise within the submit that you don’t have any reminiscence of buying, this must be a right away crimson flag. A imprecise or lacking return tackle, and a doable QR code contained in the package deal, are additionally warning indicators.
To double verify, assessment your emails and any accounts you could have with e-commerce/on-line market platforms, to search for not too long ago bought items. It’s price additionally checking your financial institution accounts and credit score stories for suspicious exercise, because the scammers could have already moved on to the subsequent stage of the scheme.
What ought to I do if I obtain a package deal?
For those who obtain one thing within the submit that you could’t bear in mind ordering, decrease danger by taking the next steps.
- Double verify it’s not a present by asking your family/pals/household in the event that they’ve ordered something in your title not too long ago.
- Don’t scan any QR codes which may be dispatched contained in the parcel
- Test no cash has left your checking account and/or new credit score traces haven’t been opened in your title
- Guarantee you could have multi-factor authentication (MFA) arrange in your on-line banking/bank card accounts
- Allow MFA on all on-line buying and electronic mail accounts
- Report the fraud to the related market (eg Amazon). Most ought to have a devoted place to report brushing fraud
- Don’t hassle attempting to return the merchandise to sender. It’s yours to maintain, if you wish to
How do I keep secure from brushing scams?
There are steps you can too take to cease brushing scams from even concentrating on you. All of it goes again to what private knowledge of yours is out there to the fraudsters.
Granted, there’s not a lot you are able to do if a corporation you do enterprise with will get breached, spilling your particulars. However there are identification safety companies you should utilize which scan the darkish internet for probably compromised data. A few of them can be found as a part of a basic residence safety package deal. For those who discover that any accounts have been compromised, change your passwords instantly. It’s additionally price placing a credit score freeze in place to dam any makes an attempt to make use of your title in an effort to run up debt on new playing cards.
As scammers additionally harvest knowledge from the general public internet, it’s necessary to get into good privateness habits. Meaning minimizing what you share on social media, locking your accounts down so solely pals can view your posts, and take away any private particulars like residence addresses, birthdates and telephone numbers.
Lastly, scale back the chance of scammers getting your particulars from knowledge brokers, by opting out on “folks finder” websites like BeenVerified, Spokeo, and TruthFinder. It’s going to require a bit of labor, and you’ll possible have to revisit these websites each few months to repeat the method, however is price the additional effort.
Brushing scams are simply one in all some ways fraudsters weaponize your private data towards you. Sadly, mitigating this danger isn’t a case of “one and achieved”. You’ll want to take care of steady vigilance over your digital world. Finally, it’s the worth we pay for entry to the companies we love.
