The “Brushing” Scam: Understanding the E-commerce Fraud Affecting Your Mailbox

In recent months, social media platforms like TikTok have been flooded with videos from confused consumers who have received mysterious packages they never ordered. From cheap plastic trinkets to empty boxes, these unsolicited deliveries are not random mistakes. They are the hallmark of a sophisticated e-commerce fraud tactic known as “brushing.”

As digital marketplaces continue to dominate global retail, understanding how these scams operate is essential for protecting your personal information and maintaining the integrity of online shopping platforms.

What Exactly is Brushing?

Brushing is a deceptive practice used by unscrupulous third-party sellers on major e-commerce platforms to artificially boost their store ratings. By sending low-cost, lightweight items to real addresses, scammers can generate a fake “verified purchase” review on their own products.

The process is relatively straightforward but highly unethical:

• Data Acquisition: Scammers obtain names, addresses, and sometimes phone numbers—often through data breaches or by purchasing databases on the dark web.
• The Shipment: The seller sends a cheap item to a consumer without their knowledge.
• The Review: Once the tracking information shows the package has been “delivered,” the seller uses the legitimate address to post a glowing, five-star review for their own product, marking it as a “verified purchase.”

According to the United States Postal Inspection Service (USPIS), these sellers prioritize the increase in their store’s ranking and visibility over the actual profit from the sale of the items themselves. A higher rating makes their products appear more trustworthy to unsuspecting shoppers, leading to more organic sales of their legitimate inventory.

Why You Are a Target

If you receive a package you didn’t order, it does not necessarily mean your primary credit card or bank account has been compromised. In many cases, the scammer only needs your name and address to create the illusion of a transaction. However, the fact that your data was used at all is a significant red flag.

Being a recipient of a brushing package suggests that your personal information is circulating in illicit databases. This exposure can increase your risk for more dangerous forms of identity theft, such as phishing attacks or account takeovers.

How to Respond to Unsolicited Packages

If you find a mysterious package on your doorstep, do not panic, but do take the following steps to protect yourself:

1. Do Not Use the Product: Even if the item seems harmless, avoid using it. There have been instances where packages contained low-quality electronics or products that could pose safety risks.
2. Check Your Accounts: Log into your accounts on major e-commerce platforms. Check your “Order History” to ensure that no one has accessed your account to place unauthorized orders.
3. Contact the Retailer: If the package has a return address or branding from a specific site (like Amazon or eBay), contact their customer support immediately to report the incident. They need this information to identify and ban the fraudulent seller.
4. Report the Fraud: File a report with the Federal Trade Commission (FTC). These reports are vital for tracking trends in consumer fraud.
5. Monitor Your Credit: Since your address is being used, it is a good practice to monitor your credit reports for any suspicious activity or new accounts opened in your name.

Key Takeaways

• Brushing is about ratings, not theft: The goal is to manipulate seller rankings through fake verified reviews.
• Your data is the currency: These scams rely on real names and addresses obtained from previous data breaches.
• You are not liable: According to the FTC, you are not legally required to pay for items you did not order. You are generally entitled to keep, discard, or donate the unsolicited merchandise.

A Forward-Looking Perspective

As e-commerce platforms integrate more advanced AI to detect fraudulent review patterns, the “brushing” tactic is becoming easier to identify. However, the burden of vigilance remains on the consumer. By staying informed about how these scams function and promptly reporting unsolicited deliveries, users can help platforms purge awful actors, ultimately making the digital marketplace safer for everyone. Remember: if you didn’t order it, don’t ignore it—report it.