The Rise of ‘Brushing’ Fraud: Are Mystery Packages Landing on *Your* Doorstep?
A strange package arrives. You don’t remember ordering anything. Inside? Perhaps some cheap jewelry, a gadget, or even plant seeds. While it might seem like a harmless mistake, or a quirky gift from a secret admirer, this could be a sign you’ve become an unwitting participant in a growing scam known as “brushing” fraud.
What is Brushing Fraud and Why is it Increasing?
Brushing fraud is a deceptive practice where fraudsters use stolen personal details to send you unsolicited products. But it’s not about the items themselves; it’s about the reviews. They then post fake, verified positive reviews on online marketplaces, seemingly from you, to boost the seller’s ranking, and credibility. According to online security experts, this scam is on the rise.
The key to understanding why this works lies in how online marketplaces verify purchases. To ensure a review is legitimate, many platforms require a record of a purchase being shipped to the reviewer’s address. Fraudsters exploit this by using your address – obtained through data breaches – to fulfill this requirement.
The Hidden Dangers Beyond Fake Reviews
While the primary goal is to manipulate online rankings, brushing fraud carries other risks. Experts warn that the unsolicited items could be of poor quality, potentially harmful, especially if they are toys or cosmetics. “If We see some little toy that you give to your child, you’ve got no idea of the quality… which is a risk in itself. You have no idea where it came from and what it contains,” says Oliver Devane of McAfee.
More concerningly, some fraudsters are now including QR codes or USB drives with the products. These can contain malware designed to steal your data when scanned or connected to your computer.
Spotting the Signs: What Does a Brushing Package Appear Like?
Brushing packages typically contain low-value, inexpensive items. Deliveries often peak during busy shopping periods, but can occur at any time of year. The packaging may appear legitimate, but the contents will likely be of poor quality. Crucially, the package will include your full address details.
What to Do If You Receive a Mystery Package
If you receive a package you didn’t order, experts advise against using or consuming the contents. Here’s a step-by-step guide:
- Do Not Use It: The item may be dangerous or substandard.
- Check Your Accounts: Verify We find no unauthorized orders on your online shopping accounts.
- Report It: Report the incident to the marketplace the package appears to be from. Amazon, for example, has a specific reporting mechanism for unwanted packages.
- Change Passwords: Update the passwords on your online shopping accounts and enable two-factor authentication for added security.
- Do Not Return It: Returning the package could encourage further scams.
- Dispose of It: Simply throw the package away after reporting it.
Future Trends: How Brushing Fraud Might Evolve
As awareness of brushing fraud grows, fraudsters will likely adapt their tactics. We can anticipate:
- More Sophisticated Items: Moving beyond cheap jewelry to items that appear more valuable, increasing the likelihood of a victim using the product.
- Targeted Attacks: Focusing on individuals with a strong online presence and a history of leaving reviews, maximizing the impact of fake reviews.
- Increased Malware Distribution: More frequent use of QR codes and USB drives to distribute malware, exploiting curiosity and trust.
- Exploitation of New Marketplaces: Expanding operations to newer, less regulated online marketplaces.
FAQ: Brushing Fraud – Your Questions Answered
Q: Is brushing fraud illegal?
A: Yes, brushing fraud is illegal in the U.S. And many other countries.
Q: What is the purpose of brushing fraud?
A: The primary purpose is to create fake, verified reviews to boost a seller’s online ranking and credibility.
Q: Can brushing fraud lead to identity theft?
A: Yes, it indicates your personal details have been compromised in a data breach, potentially leading to further identity theft.
Q: What should I do if I suspect I’ve been targeted?
A: Report the incident to the marketplace, change your passwords, and enable two-factor authentication.
Did you realize? Reporting unwanted packages to marketplaces helps them identify and remove fraudulent sellers, protecting other consumers.
Stay vigilant, protect your personal information, and report any suspicious activity. By understanding the tactics used in brushing fraud, you can safeguard yourself from becoming the next victim.
Learn more about brushing scams from the United States Postal Inspection Service.
Related reading