Mysterious Package on your Doorstep? Make Sure It’s Not a Brushing Scam

For over 11 years, SafeWise experts have conducted independent research and testing to create unbiased, human reviews. Learn how we test and review.

pro

Why you can trust SafeWise  

250+ products considered
10k+ research hours  25+ in-home tests
176+ years of combined expert experience
10M homes and people protected

Bell
Need to Know from SafeWise
  • "Brushing" is a scheme where scammers send a product to your doorstep, using your address online to verify fake reviews.
  • Recently, brushing has evolved to include QR codes on packages that can give scammers access to important info on your phone.
  • If you receive an unsolicited package that isn't from family or friends, do not scan any QR codes or pay money for the parcel.

You come home and discover a package on your front step even though you didn't order anything. There's no return address or sender information, only a QR code and your name and address are printed clearly on the top. What do you do? 

Stay Safe and become a SafeWise Insider!

Sign up for our free weekly newsletter to get the best safety news, product info, and deals.

By signing up, you agree to our Terms and Conditions and Privacy Policy.

What is brushing?

First off, don't scan that code. Although it sounds like the beginning of a mystery novel, cases like these have been reported nationwide over the last few years, and it's a scam called "brushing."1

While sending free stuff seems like an odd way to scam people, it's been used as a technique to improve fake reviews. After scammers "brush" your address from the internet, they send you free items using your information to write more convincing fake reviews as "verified users." 

They have your address, but you got free stuff. So what's the fuss?

Recently, these scams have started to evolve, adding a QR code to tempt you with sender information. But once you scan that code and click the link, scammers can swipe information from you, including bank information.2 

How to protect yourself from brushing scams

Brushing comes with good news and bad news. The good news is whatever is sent to your address is yours to keep, whether it's an iPad or a pair of socks. The bad news is this means your information is available, and scammers want more. 

The trick is to not let your curiosity get the best of you. Here are a few tips for resisting giving scammers more information. 

First off—don't scan the QR code

Generally, it's best not to scan a QR code unless it's been verified. And unless the code on your mysterious package comes from a family member, friend, or other known source, it's best to proceed with caution. Scammers today can use old phishing tactics with newer QR tech to make fake websites and phony codes shockingly easy.3 

Make sure it's not a gift

Many of us love sending surprises as much as we love receiving them. Before scanning or signing up for anything related to the package, check with friends and family. Sometimes, packages meant for special occasions like birthdays and anniversaries can get delayed in the mail, causing them to arrive much later than intended.

Notify the retailer or manufacturer

Unfortunately, brushing is widespread enough for retailers like Amazon to have protocols for targets. If you receive an Amazon package you did not order (and was not a gift), you can fill out this form to notify the retailer.  

Other manufacturers and retailers may not have a form, but they'll likely have a customer service line you can call to report the package. 

Change your passwords

If you're a target of brushing, the bad news is the scammers already have some of your information. Whether from a data breach or another method, this is a clear cue to change your passwords. Bank accounts, retail information, medical information, utilities, and other protected accounts can be fair game once scammers get access to your phone.

Best Password Manager
Dashlane
Dashlane
Starts at$0.00/yr

Info current as of post date. Offers and availability may vary by location and are subject to change.

Monitor your accounts

If you become the target of a brushing attack, there's a good chance scammers already have some of your critical information. Even after you change the passwords to your home Wi-Fi, bank, and personal accounts, it's smart to keep a close eye on everything to make sure everything's safe. 

Brushing is a perfect example of how online tactics evolve and change. While a package on your doorstep may seem like a victimless crime, the reality is that these "free" deliveries actually cost you valuable personal information. 

By staying cautious and following the steps outlined—avoiding QR codes, confirming the source, and securing your accounts—you can protect yourself from the hidden dangers of these scams. Stay vigilant, and always remember: if it seems too good to be true, it probably is.

Man picks up delivery envelope on doorstep

Brushing is a perfect example of how online tactics evolve and change. While a package on your doorstep may seem like a victimless crime, the reality is that these "free" deliveries actually cost you valuable personal information. 

By staying cautious and following the steps outlined—avoiding QR codes, confirming the source, and securing your accounts—you can protect yourself from the hidden dangers of these scams. Stay vigilant, and always remember: if it seems too good to be true, it probably is.

Related articles on SafeWise

Sources

  1. United States Postal Inspection Service, "Brushing Scam," Published October 25, 2023. Accessed September 10, 2024. 
  2. ABC7 Eyewitness News New York, "Tips on how to avoid being scammed by QR codes from unexpected gifts," Published August 29, 2024. Accessed September 10, 2024. 
  3. Social Security Administration, "Protecting Yourself from QR Code Fraud," Published February 23, 2024. Accessed September 10, 2024. 
Katie McEntire
Written by
As a renter, pet-owner, and woman living alone, Katie McEntire takes safety seriously. She’s tested devices like pet cameras, home security systems, and GPS trackers in her own home and devices in the name of safety. In addition to testing, writing, and reviewing for SafeWise, she also makes videos for the site’s YouTube channel. She’s been featured on publications like TechGuySmartBuy, Forbes, Healthy Moms, and Digital Care. Katie has a Bachelor’s degree in Technical Writing from Austin Peay State University in Clarksville, Tennessee. She’s held previous writing positions at Overstock.com and Top Ten Reviews.

Recent Articles

Man and woman couple wife husband set up surveillance security camera
Best Apartment Security Systems of 2024
In 2024, we tested the best apartment security systems and cameras. They offer security solutions...
woman adjusting thermostat in bright home
The Best Home Security Systems and Alarm Companies of 2024
After thousands of hours of tests and research, we picked Vivint and SimpliSafe as the...
small yellow single family home
Abode vs Ring: Which security system is better?
Abode reigns over Ring in this DIY system face-off, but it’s not a clean sweep....
man pointing at smart home control app on a tablet
The Best Smart Home Security Systems
We’ve tested and researched smart home security systems to help you find the right DIY...