What is the Brushing Scam: How to Keep Safe When Shopping on Amazon

Let’s face it—online shopping is a little like retail therapy. You click, add to cart, check out... and then forget about it. Three days later, a package arrives, and it feels like a surprise gift. But as fun as online shopping is, scammers are waiting to turn that surprise into a shock.

The brushing scam is where scammers send products to random people to create fake reviews. To avoid this scam, protect your personal information and closely monitor your accounts.

In the US, 30% of people say they’ve been targeted by a scam while they were shopping online during the holidays. 30% of the scams happened on Black Friday, and 11% on Cyber Monday. One scam targeting online shoppers is brushing.

Basically, a brushing scam is when sellers or scammers send unsolicited packages (usually cheap, lightweight products) to random people. Their goal is to fake a "verified purchase" so they can make fake 5-star reviews using your identity to trick other buyers.

Brushing scams have been widely reported, prevalent on major platforms like Amazon, eBay, and AliExpress.

People receive random products, from silicone hair ties to plastic toys.

Here’s how brushing scams unfold:

• Step 1: Research: Scammers will find your personal details (e.g., name, address, and contact details), which are sometimes leaked on the dark web from data breaches or bought from shady data brokers.
  
• Step 2: The Order: Scammers will order cheap items to your address. Sometimes, scammers buy items using stolen financial information.
  
• Step 3: Fake Review: When the delivery is successful, it will create a “verified purchase.” This will allow scammers to post fake reviews on their products, using your identity.
  
• Step 4: Product Boost: With the glowing five-star reviews, scammers will be able to boost their product’s ratings and visibility, attracting more buyers.

According to the United States Postal Inspection Service, there’s a new version of the brushing scam—this time with "quishing."

Quishing is a form of phishing where scammers trick you into scanning a QR code, leading you to a fake website that looks legitimate.

Scammers are now slipping these QR code cards into brushing packages, claiming they will reveal who sent you the package. But in reality, it’s just another scheme to steal your personal data.

While you’re getting free stuff, brushing scams come with negative impacts.

• Privacy Breach: Receiving a brushing package means that someone has your name, number, and full address. What else do they know about you?
  
• Inflated Product Reviews: Fake reviews made under your name can mislead real customers into buying low-quality or harmful products, polluting online shopping trust.
  
• Potential Identity Theft: Brushing scammers having your personal information gives them the capability to use your identity to take out loans or scam other people.
  
• Unwanted Clutter: Lastly, receiving brushing packages means you’ll have unwanted products. So, congratulations! You now have five USB-powered fish tank lamps.

Here are some ways you can prevent brushing scams:

• Tip No.1: Secure Your Personal Information: Don’t let scammers use your personal information. This means not giving out your address on sketchy sites or contests, or limiting what you share on social media. Also, opt out from shady data brokers!
  
• Tip No.2: Check Your Accounts: Monitor your online shopping accounts. You can look out for unusual purchases or reviews you didn’t make.
  
• Tip No. 3: Monitor Your Credit: Consider signing up for credit monitoring services because brushing scams can signal a bigger privacy breach.

Amazon investigates all reports and may take action against scammers (e.g., suspending sellers, withholding payments, or involving law enforcement).

Here’s what to do if you receive brushing packages:

• If no one you know sent it, report the package using Amazon’s Report Unwanted Package form.
• If the package is addressed to someone else, you should contact Amazon Customer Service.
  

When reporting, provide the following:

• The number of unwanted packages
• At least one tracking number
• Any helpful details

Overall, brushing scams are sneaky and more common than you’d expect.

And while getting a random package may feel like winning, it’s best to stay alert.

Because in online shopping, if it shows up without a receipt, it will likely come with strings attached.

So next time you receive a package for free, don’t just think about who sent it—ask, “Who’s trying to review this…using my identity?”

What if a package is out for delivery but never delivered?

If your package is stated to be “out for delivery” but you haven’t received it for a long time, you should contact the carrier quickly. Give them the tracking number. Then, ask for a status update on your order.

What if my Amazon order came but with nothing in the box?

If your order was successfully shipped but you received an empty package, contact Amazon’s Customer Service. Do so within 30 days of expected delivery so that Amazon will be able to help. If your order was shipped by a third-party seller, contact the seller directly.