Shopping / identityPhysical packageQR code in package
Brushing scam (unexpected package)
Last updated
Also known as: Unordered package scam, fake Amazon package review
What it looks like
A package you did not order arrives (often cheap items like wipes, toothpaste, or seeds), sometimes with a QR code claiming to identify the sender or process a return. Scammers use the delivery to post fake reviews or to phish via the QR code.
Who it targets
Online shoppers; anyone whose address/name can be used for fake reviews.
Red flags
- Package you never ordered
- QR code inside asking you to scan for sender/return info
- Unknown seller on a marketplace
What to do if you clicked, paid, or replied
- Do not scan QR codes from unexpected packages
- Change passwords on shopping accounts; notify the marketplace
- Monitor credit at AnnualCreditReport.com
- You generally need not return or pay for unordered merchandise
- Report at ReportFraud.ftc.gov
Still circulating?
FTC consumer alert August 20, 2026.
Primary source: FTC Consumer Advice · 2026-08-20
Educational summary only. Verify details on the source page. Report fraud at ReportFraud.ftc.gov or ic3.gov.