An Unexpected Package at Your Door? Think Before You Scan

Key Takeaways

• An unsolicited package may be part of a “brushing” scam.
• The package could indicate that someone has obtained some of your personal information.
• Never scan an unexpected QR code to identify a sender or arrange a return.
• Review shopping accounts and credit information if something seems suspicious.

Main Article

Finding a package on your doorstep is usually nothing unusual. But what if the package is addressed to you and contains something you never ordered? The Federal Trade Commission recently warned consumers about an increase in so-called “brushing” scams involving unexpected deliveries. 

In a brushing scam, a seller may send an inexpensive item to a real person’s address so the delivery can later be used to support fraudulent online reviews. According to the FTC, unexpected packages have included random inexpensive items such as household products or seeds. More concerning, receiving one may indicate that someone already has access to some of your personal information. 

Be especially cautious if the package includes a card or note containing a QR code. It may claim the code will reveal who sent the item or provide instructions for returning it. Instead, scanning it could take you to a fraudulent website designed to capture passwords, payment information or other sensitive data. Don’t scan the code.

If you receive a package you didn’t order, check your online shopping accounts for unfamiliar activity, update passwords when appropriate and notify the retailer or marketplace directly. The FTC also recommends reviewing your credit reports for signs of identity theft. An unexpected delivery may seem harmless, but treating it as a reason to take a closer look at your accounts can help you stay a step ahead.