Getting Mystery Packages? Here Is What Brushing Scams Really Mean

A box shows up at your door. You never ordered it, but your name and address are right there on the label. It feels like a fun surprise, maybe even a mix-up in your favor. The Better Business Bureau says this pattern has a name: brushing. It has been showing up in mailboxes across the country, and it is not random. Someone deliberately shipped that item to you, often using your real name and delivery address without your permission. Understanding why this happens is the first step to protecting yourself, and the reason behind it is more calculated than most people realize.

This article was created with the assistance of AI and reviewed by our editorial team for accuracy and clarity.

Why Scammers Send Strangers Free Stuff

Brushing gets its name because sellers are trying to brush up their online reputation. After shipping an item to a real address, the seller posts a glowing review under the recipient’s name, even though that person never placed an order. A verified purchase with a five star review makes the product look popular and trustworthy, which drives more real sales. It is a shortcut around legitimate feedback, and it works because most online shoppers trust reviews from verified buyers. The unsuspecting person who received the box becomes an unwitting part of the scheme.

The Items Are Usually Small and Cheap

Brushing packages tend to contain lightweight, inexpensive items that are cheap to ship in bulk. Reports mention things like ping pong balls, face masks, seeds, hair clips, and costume jewelry. In some cases people have received more unusual items, including a humidifier, a hand warmer, a flashlight, a Bluetooth speaker, and a small vacuum cleaner. Occasionally the box arrives completely empty. The variety makes it tricky to spot a pattern right away, especially for households that order online frequently and might assume it is simply a mix up from a retailer.

There Is Often No Return Address

One telltale sign of a brushing scam is a package with no return address at all, or one that just vaguely lists a retailer’s name without any real seller information. Investigators looking into these packages have traced them back to invented sender names that appear over and over on different shipments across many states. That repetition suggests organized operations rather than one off mistakes. If a package looks like it came from a major retailer but the sender information does not check out when you search it, that is a signal worth paying attention to.

How the Scammers Got Your Address

A brushing scam does not happen by accident. According to the BBB, it usually means someone found your name, address, and possibly your phone number online, whether through a data breach, a public record, or another exposed source. That is the part that concerns experts most. It is not really about the free item. It is a sign your personal information may already be circulating somewhere it should not be, which is why security experts recommend treating a mystery package as a prompt to review your online accounts.

A Newer Twist Involves QR Codes

Scammers have started including a small card inside the package with a QR code, often labeled with something like a request to scan for more information about the sender or the shipment. Scanning it can lead to a fake website designed to collect personal details or login information. Consumer protection groups describe this tactic as quishing, a blend of QR code and phishing. The advice here is simple. Treat any QR code from an unexpected package exactly the way you would treat a suspicious link in a text message or email, and avoid it entirely.

Yes, You Are Allowed to Keep It

Here is some reassuring news. Under federal law, unordered merchandise sent to you in the mail becomes a gift, and the Federal Trade Commission confirms you have a legal right to keep it. You are under no obligation to pay for it, return it, or respond to the sender in any way. Trying to send it back can actually create more risk, especially if the return instructions ask you to scan a code or enter personal information, since that step could expose more of your data rather than resolve anything.

Check Your Accounts and Change Your Passwords

Since brushing can signal that your information has been exposed, it is worth logging into your major shopping and financial accounts to look for unfamiliar orders or charges. Updating your passwords, especially for any accounts using recycled or older passwords, adds a layer of protection. Keeping a closer eye on your credit card statements and credit reports for a while afterward is also a sensible precaution. These steps take a few minutes but can catch a bigger problem early if your data has genuinely been compromised.

What to Do If Packages Keep Arriving

For most people, a single unexpected package is a one-time nuisance. But some residents report being flooded with unordered items on a recurring basis. If that happens, consider temporarily refusing delivery at your address through your local post office or delivery carrier, since undeliverable packages typically cause the scammers to stop sending. You can also report the incident to the retailer whose name appears on the package, since companies like Amazon investigate seller accounts tied to brushing activity and may remove fraudulent listings or reviews.

The Real Takeaway Behind the Free Box

A brushing scam might look harmless, even like a small stroke of luck, but the real story is about exposed personal information rather than free merchandise. The most useful response is not worrying about the item itself. It is treating the package as a nudge to check your accounts, strengthen your passwords, and stay alert to anything asking you to scan a code or click a link. Keep the item if you want to. Just do not let it distract you from the bigger picture of protecting your data.