Unexpected Package? It could be a Brushing Scam

Brushing scams use stolen or exposed personal information to create fake online reviews and can signal that your data is being misused.

An unexpected package on your doorstep may feel like a pleasant surprise. Before you open it, it's worth considering whether it was sent as part of a brushing scam.

What is a Brushing Scam?

A brushing scam occurs when a seller sends an unexpected package to someone whose name and address they have obtained. The package often contains inexpensive items such as phone accessories, household gadgets, jewelry, or beauty products.

The scammer then uses the shipment to create a fake "verified purchase" and posts a positive review for the product. Because the item was actually shipped to a real address, the review appears more legitimate to online shoppers.

How Did They Get My Information?

Brushing scams often rely on personal information that has been collected from various sources, including:

Receiving a package doesn't necessarily mean your bank account or credit card has been compromised. However, it may indicate that your personal information is circulating among third parties without your permission.

Why Brushing Scams Matter

At first glance, brushing scams may seem harmless. After all, the recipient often gets to keep the item. However, there are risks involved.

1. Fake Reviews Mislead Consumers

Brushing scams allow sellers to create fake positive reviews, making products appear more trustworthy than they really are.

2. Your Information is Being Used

The fact that a package arrived at your home means someone has access to at least some of your personal information. While it may only be your name and address, it is still a sign that your data may have been exposed.

3. QR Code Scams Are Increasing

Some brushing scams now include QR codes inside the package. Scammers may encourage recipients to scan the code to learn more about the product, claim a reward, or register a warranty.

In reality, these QR codes can lead to fraudulent websites designed to steal login credentials, collect personal information, or install malicious software on your device.

What Should You Do if You Receive an Unsolicited Package?

1. Don't Scan Any QR Codes

Avoid scanning QR codes from unexpected shipments. If you're curious about a product or company, visit its website directly through your browser instead.

2. Monitor Your Accounts

Keep an eye on your financial accounts, online shopping accounts, and email for suspicious activity.

3. Update Your Passwords

If you are concerned your information may have been exposed, consider changing passwords for important accounts and enabling multi-factor authentication whenever possible.

4. Report Suspicious Activity

If you notice signs of identity theft or fraud, report the issue immediately and take steps to secure your accounts.

Although brushing scams don’t typically result in immediate financial loss, they can be a sign that your personal information is being used without your knowledge. While they may appear harmless, they often point to a larger issue: your data may be exposed or misused. Staying aware of emerging scam tactics can help you better protect your identity and financial security.  

The information provided in these articles is intended for informational purposes only. It is not to be construed as the opinion of Central Bancompany, Inc., and/or its subsidiaries and does not imply endorsement or support of any of the mentioned information, products, services, or providers. All information presented is without any representation, guaranty, or warranty regarding the accuracy, relevance, or completeness of the information.