Online Threat Alerts (OTA) - Alerting you to scams and frauds.

What is a Brushing Scam?

A brushing scam occurs when e-commerce sellers send unsolicited, low-value items (like seeds, jewelry, or trinkets) to people who did not order them. The goal is to create a fake "verified purchase" review under the recipient's name to artificially boost the seller's ratings, product rankings, and sales volume on platforms like Amazon.

Brushing Scams

  • Sign of Data Breach: The scam indicates your name, address, and sometimes phone number have been leaked or sold on the dark web.
  • Common Items: Unsolicited items often include inexpensive items like plastic jewelry, seeds, masks, or phone accessories.
  • Fake Reviews: Scammers use your address to place fake orders, making them appear to be genuine customers to the algorithm.
  • Dangerous Add-ons: Sometimes, these packages may contain QR codes that lead to phishing websites, which can steal sensitive financial information or install malware.

Received a Package

  1. Do Not Scan QR Codes: If a package includes a QR code or flyer, do not scan it.
  2. Keep or Dispose of Item: Generally, you can keep or throw away the item, as you did not order it.
  3. Report the Seller: Report the unsolicited package to the e-commerce platform (e.g., Amazon) or the USPS.
  4. Monitor Accounts: Change passwords on your shopping accounts and check your credit report for unauthorized activity.
waiting