A brushing scam is a type of fraudulent scheme where a scammer sends unsolicited products to a person, usually through an online retailer like Amazon or eBay, with the intention of creating fake reviews or boosting their seller ratings. The scammer then “brushing” the product to the victim’s address, ensuring that the victim gets an unsolicited package but often has no idea they’re being used in the scam. The sender of the product(s) is not identified. Sounds pretty harmless. Someone sends you useless junk, and you can either use it (if you’re into useless junk), or simply throw it away. No harm done. But now, scammers have added a new twist to this scam which seems to be proliferating the globe. In addition to the free gifts, victims are getting cards or notes included in the package instructing them to scan a QR code in order to find out who sent them the package, or to get instructions on how to return it.
If you do happen to get one of these packages with a card or note asking you to scan a QR code, do not scan the QR code. According to the FTC, scanning the QR code could take you to a phishing website where your personal information such as passwords, credit cards, and more will be put at risk. Scanning the QR code could also install malware onto your device and give hackers unlimited access to all of your personal information stored within.
How to Protect Yourself from Brushing Scams
If you receive a package you didn’t order, it’s important to reach out to the seller or the platform (like Amazon) to confirm the legitimacy of the transaction. Easier said than done. Make sure you have them check to see if any fake accounts were set up in your name on their platform. You can also reach out to friends and family members to see if they sent you anything (if the sent items actually resemble of gift, and not just random junk). If the package contains a card or anything with instructions telling you to scan a QR code, just toss it in the trash. Although it hasn’t been reported yet as part of the scam, do not respond to any phone calls, texts, or emails that may come your way as a result of you receiving the package. If these guys have your address, they could very likely have your phone number and email address as well. Stay safe, stay aware, and enjoy your free junk.
