Brushing Scams: Why Mystery Packages Show Up With Your Name on Them

A package shows up on your doorstep with your correct name and address on it. You didn't order it. Inside is something small and cheap - a phone ring light, a set of earbuds, a bag of seeds - from a seller you've never heard of. It feels harmless, maybe even like a nice mistake in your favor. It isn't a mistake, and it isn't harmless. It's called brushing, and it's a scheme built entirely around your identity.

What Brushing Scams Actually Are

Brushing is a form of fraud where a seller, usually on a major online marketplace, ships a real (often low-cost) product to a real address using a real name - but the actual customer never placed the order or paid for it. The seller uses the shipment to generate a "verified purchase," then posts a fake five-star review under the account associated with your name and address, boosting their product's ranking and credibility without ever needing the fake buyer to say a single word.

The seller profits by faking demand and inflating review counts. You end up as the unwitting, unpaid actor in someone else's fake review campaign - which sounds almost funny until you realize what it means about the data trail leading to your door.

Why This Should Actually Worry You

The uncomfortable part isn't the free item - it's what the scam reveals. To ship you a package with an accurate name and address, brushing operators needed your personal information from somewhere. In many cases, that information came from a data breach that included your name, mailing address, and sometimes phone number, which was then sold or traded to whoever is running the brushing scheme.

Some brushing operations go further and create a fake account impersonating you on the marketplace itself, using your name and address as the account's identity so the review appears to come from a legitimate, verified customer. That means a scammer may be actively using an account tied to your identity on a platform you may not even use - an account you have no visibility into and didn't create.

Warning Signs You're a Brushing Target

• A package arrives with your correct name and address but no order confirmation email or charge on your accounts.
• The item is cheap, lightweight, and generic - phone accessories, small electronics, jewelry, or seeds are common because they're inexpensive to ship in bulk.
• There's no return address, or the return address is vague or clearly fake.
• You later find a "verified purchase" review posted under an account you don't recognize using your name.
• You start receiving repeated mystery packages over time, not just one isolated incident.

What to Do If You Receive One

You are not legally obligated to pay for or return unsolicited merchandise in the United States - under FTC rules, you can legally keep it, though many people prefer to donate or discard low-value items tied to a scam they'd rather not use. Do not scan any QR code included in the package or on an included flyer, and don't respond to any enclosed link or card asking you to "confirm" or "activate" the item - these are sometimes a secondary phishing attempt layered onto the brushing scam.

Check your account on the marketplace named on the package (Amazon, for example) for any orders, reviews, or account activity you don't recognize, even if you don't remember ever creating an account there. Change your password and enable two-factor authentication on that platform regardless, since your information being usable for brushing suggests it's circulating somewhere it shouldn't be.

Report the incident directly to the marketplace - most have a dedicated "unsolicited package" or "brushing" reporting flow, since it violates their own marketplace policies and they have an incentive to shut down the seller account behind it.

Protecting Yourself Going Forward

Because brushing relies on leaked personal data, check whether your name, address, email, or phone number has appeared in a known data breach using a reputable breach-checking service, and change passwords on any affected accounts. Consider placing a fraud alert with the credit bureaus if the brushing package coincides with other signs of identity misuse, like unfamiliar accounts, credit inquiries, or mail addressed to a name you don't recognize at your address.

Going forward, periodically search your name alongside the marketplace's name to check for reviews or account activity attributed to you that you didn't create, and keep an eye on your mailbox for a pattern rather than dismissing a single mystery package as a one-off.

The Bottom Line

An unordered package feels like a curiosity, but it's really a signal that your name and address are being used by someone you've never interacted with. Treat it as a prompt to check your accounts, tighten your passwords, and confirm your personal data hasn't leaked somewhere more damaging than a free phone case.