Congratulations, You’ve Been Scammed! (It’s Brushing Season)

You open your front door and there’s a small brown box addressed to you… no sender you recognize, no charge on your card. Looks harmless, maybe even kind of fun. But here’s the deal: it might be part of a “brushing scam.” The kind where your name gets borrowed for someone else’s profit. Before you shrug it off, let’s talk about what’s really going on and how to keep your doorstep (and data) from being part of the hustle.

The U.S. Postal Service says that mystery box on your doorstep isn’t from a secret admirer or a long-lost aunt. It’s part of a “brushing scam,” a shady global racket where online sellers mail out random cheap junk so they can post glowing “verified buyer” reviews. Hate to break it to you, but you’re not special. You’re an unpaid marketing intern for a fraud factory somewhere overseas.

The Illusion of Free Stuff

At first, it feels a little magical. A small brown box appears, addressed to you with no sender you recognize, no charge to your card. You think, Did I order something and forget? or Maybe it’s a free sample.

You tear it open and find plastic hair ties, a phone case for a model you don’t own, or socks that could fit a toddler elf. It’s weird but harmless, so you shrug and move on.

That shrug is exactly what the scammers are counting on.

Every year, especially around the holidays, thousands of people across the U.S. receive “free” packages they never ordered. Behind those tiny boxes is a big, ugly con: sellers need fake sales to make their junk appear popular. The more “verified purchases,” the higher their products rank in search results.

To pull it off, they need real names, real addresses, and real delivery confirmations. Your information just happened to land in their spreadsheet.

What is a Brushing Scam?

Here’s the short version and it’s sneakier than it sounds …

A shady online seller gets ahold of a list of real names and addresses, usually scraped from hacked data or sold through one of those too-good-to-be-true marketing lists.

Next, they create fake customer accounts on big-name retail sites like Amazon, Walmart, eBay, Temu, or AliExpress.

Then comes the odd little twist: they ship a cheap trinket… maybe a keychain, a pair of socks, or a plastic gadget that barely qualifies as a product to your real address. That delivery “verifies” the purchase in the system.

Once it’s marked as delivered, they post a glowing five-star review under your name: “Love it! Best purchase ever! Fast shipping!”

Their junk listing climbs the rankings, fooling real shoppers into thinking it’s legit. Meanwhile, you’re left wondering why the universe sent you a mystery silicone phone grip or a pair of off-brand sunglasses you never asked for.

That’s the brushing scam in a nutshell… an online reputation hustle that turns unsuspecting people into fake customers. You didn’t order it, but your name just helped someone’s scammy storefront look trustworthy.

Why You Might Be Getting “Free” Packages

Scammers aren’t picky. If your address exists and can receive mail, you’re fair game. Maybe your info came from a mailing list you never meant to join, an online sweepstakes from 2018, or a retailer that promised your data was “safe,” right before it wasn’t.

They especially like active online shoppers because those addresses look more believable for “verified purchase” reviews. If you’ve ordered from multiple online platforms over the years (and let’s be honest, who hasn’t?), your name may already be floating in more databases than you realize.

Other times, it’s completely random. You could live at the end of a gravel road in Montana or a downtown apartment with a mailroom full of mystery boxes. Doesn’t matter. To the scammer, you’re just a convenient address that makes their fake reviews look real.

The truth is, brushing scams don’t just target careless people. They exploit how connected everyday life has become. The more we shop, share, and sign up online, the easier it is for our data to travel without us.

What You Should Do Right When the Box Arrives

The first instinct is curiosity. The second is panic. The right move is neither. Here’s your Cheapskate-approved playbook for brushing season:

1. Don’t Celebrate. Document.

Snap photos of the label, packaging, and whatever random trinket arrived. Keep any inserts or slips inside. You don’t have to ship it anywhere, but if you file a report, this evidence helps investigators trace the source, and sometimes, it connects dots across larger scams.

2. Report It. Yes, Even the Weird Ones.

The U.S. Postal Inspection Service actually wants to hear about this nonsense. File a quick report at uspis.gov/report. It takes about two minutes.

Then head to reportfraud.ftc.gov. The FTC uses these logs to track trends and shut down bulk scammers.

If the box came through a major retailer like Amazon or Walmart, report it through your account portal. These companies actively monitor brushing scams and flag sellers who abuse the system.

3. Check Your Accounts Like a Paranoid Detective.

Most brushing scammers only have your basic shipping info, but it’s worth assuming there’s more behind it.

• Change reused or weak passwords.
• Turn on two-factor authentication (yes, it’s annoying, but worth it).
• Review your recent orders and shipping addresses.
• Scan your credit and bank statements for mysterious charges.

Think of it as spring cleaning for your digital life, but with a little more suspicion and a lot less lemon-scented spray.

4. Don’t Pay, Don’t Return, Don’t Respond.

Under U.S. law, unsolicited merchandise is legally yours. You can keep it, toss it, or donate it. What you don’t do is engage.

Never scan QR codes or follow links printed on the box. Don’t email “customer support” addresses or try to “return to sender.” That’s how scammers confirm they’ve got a live one.

Your silence is your best defense.

5. Fortify Your Digital Walls.

If it happens again (and it might), assume your info has made its way onto a few too many spreadsheets.

• Sign up for USPS Informed Delivery so you can preview incoming mail.
• Consider using a P.O. Box or virtual mailbox for online orders.
• Set up a Google Alert for your name and address. It’s free and will flag you if your info pops up where it shouldn’t.

These small moves turn you from a sitting duck into a mildly irritated hedgehog… still cute, but now armed with spikes.

Why This Scam Exists—and Why It Keeps Working

Fake reviews have become the unofficial currency of the internet. The average shopper spends maybe nine seconds deciding whether to click “Buy Now,” and in that blink, star ratings do most of the talking.

When a no-name gadget suddenly boasts two thousand glowing reviews (“Changed my life! Would give six stars if I could!”), it creates instant credibility. And credibility, in the online marketplace, equals cash.

Brushing sellers aren’t trying to scam you directly. They’re using you to scam everyone else. By sending you a random package, they can post a “verified purchase” review tied to your address, just enough legitimacy to make cheap junk look like a bestseller.

Think of it like this: they’re borrowing your good name to pull off a marketing heist. You’re the uncredited co-star in a performance called “Five Stars and a Lie.”

The brushing scam thrives on the one thing we all rely on: trust. And it’s a reminder to pause before assuming every five-star story is worth believing.

Why You Should Care

That little “freebie” on your doorstep? Not quite as innocent as it looks. If someone can send something in your name, they could also create fake accounts, post reviews pretending to be you, or make it look like you’re endorsing brands you’d never buy.

Identity data is gold. Even something as basic as your name, phone number, and address has resale value on the digital black market. The more complete your profile, the more valuable it becomes.

So, those neon shoelaces or mini trinkets? They’re proof your data is being used without your say-so.

What Authorities Say

Both the USPS and FTC keep repeating the same advice: don’t engage. You don’t owe anyone the box back, and you’re not responsible for postage.

In some cases, the Postal Inspection Service has tracked large brushing rings to international sellers with warehouses full of random items, everything from toothbrushes to plant seeds. Remember those mysterious seed packages from overseas a few years back? Same scam family.

The good news: once you report it, your address often gets flagged, which reduces the chances of repeat deliveries. The bad news: scammers move fast, and new accounts pop up daily.

How to Protect Yourself Long-Term

• Be stingy with your data. Only fill out surveys or sweepstakes if you genuinely trust the brand.
• Skip the sketchy apps. Many shopping apps quietly harvest your info. Stick to ones you know and trust.
• Check your credit reports. You’re entitled to one free report per bureau every year at AnnualCreditReport.com.
• Use email aliases. Privacy-focused options like ProtonMail or Apple’s “Hide My Email” keep your real address off lists.
• Teach the next generation. Teens and young adults are prime targets for fake “free gifts.” A short family chat can save them years of digital headaches.

When It Keeps Happening

If multiple unwanted packages keep showing up, it’s time to level up your response. File a mail fraud complaint with the Postal Inspection Service. This helps authorities track patterns and potentially shut down repeat offenders.

Consider freezing your credit with the three major bureaus (Equifax, Experian, and TransUnion) to make sure no one can turn your name into something bigger than fake reviews. It’s quick, free, and gives you peace of mind.

And if packages arrive with someone else’s name at your address, alert your local post office immediately. That’s often a red flag for identity theft or address spoofing, and catching it early can save a lot of headaches down the road.

The Everyday Cheapskate Takeaway

Free stuff is fun… until it drags your identity into a global con.

That surprise delivery on your porch isn’t generosity; it’s strategy. Scammers want your name, your address, and your silence. They’re counting on you to toss the package and move on, leaving their fake “verified buyer” review unchallenged.

Next time a random box shows up, resist the urge to feel special or chosen by the gods of e-commerce. Snap a photo, file a report, and remember: sometimes the best deal is the one you don’t open.

And if you do keep the prize, congrats! You now own the world’s most useless toothbrush… and a minor role in a global internet prank.

 

Question: Have you ever received a package you didn’t order? What did you think when you saw it and what did you do next? Share in the comments below.

More from Everyday Cheapskate

Please keep your comments positive, encouraging, helpful, brief,
and on-topic in keeping with EC Commenting Guidelines

Caught yourself reading all the way 'til the end? Why not share with a friend.