• Tech Tech

Unexpected package at your door? It could be a 'brushing scam' using your name for fake reviews

Some of the surprise packages can come with a QR code that might open a malicious site or trigger a malware download.

A cardboard box sits on a doorstep next to a welcome mat.

Photo Credit: iStock

If an unexpected package shows up at your door, it might seem harmless at first. However, experts say it may actually indicate misuse of your personal data as part of a larger scam.

As the U.K. consumer advocacy organization Which? (@whichuk) said in an Instagram video, these unexplained deliveries often can be connected to efforts to game review systems and improve sellers' visibility on major shopping platforms. 

Here's what to know

As the video explained, scams can start when a marketplace seller on sites like Amazon, eBay, or AliExpress obtains someone's personal details, probably from a data breach, and uses them to submit an order. Because the item is delivered, the platform identifies the transaction as a real purchase, which then allows the seller to post a fake favorable review in that victim's name.

Such scams are known as "brushing scams," according to Which?.

The consumer advocacy organization said sellers do this "at scale with cheap rubbish products" because the tactic is inexpensive while helping push those items higher in search results.

Which? said some of the surprise packages can come with a QR code and warned that scanning it might open a malicious site or trigger a malware download on the recipient's device.

What can be done?

Which? advised recipients to start by reporting the parcel to the platform on which the transaction took place. That way, the platform can be notified that the order may be linked to review manipulation.

People receiving mystery packages should also take steps to ensure that they have not been the victim of other kinds of identity theft. Such steps can include checking credit reports for unfamiliar accounts and using a data-breach lookup service to see whether any email addresses appear in a known leak.  

Additionally, Which? urged viewers to "make sure all your online passwords are strong and unique. Or even better, use a password manager."

Where can I learn more?

Unexpected packages are just one of several problems tied to online marketplaces and suspicious sellers. These stories look at unsolicited deliveries, strange Amazon shipments, and products that did not match what shoppers expected.

• Across the U.S., officials warned that mysterious seed packages may carry invasive species risks.

• Residents were stunned when packages from overseas arrived unexpectedly, raising fears about hidden contaminants.

• An Amazon customer said a bizarre package from a seller prompted complaints.

• Online shoppers accused a company of misrepresenting its clothing and using AI after a sweater looked nothing like promised.

• Shoppers warned that mislabeled products on Amazon can slip through familiar listings.

Get TCD's free newsletters for easy tips, smart advice, and a chance to earn $5,000 toward home upgrades. To see more stories like this one, change your Google preferences here.

Cool Divider