Brushing Scams: What They Are, How They Work & What To Do (2026)

Have you ever received an unexpected package at your door, only to wonder where it came from or who sent it? If so, you might have been a victim of a brushing scam. Brushing scams are a growing problem, especially in the world of online shopping, and they can affect anyone. In this guide, we’ll explain what brushing scams are, how to spot them, and what steps you can take to protect yourself from this fraudulent activity.

Quick Summary

• A brushing scam is when a seller ships you an item you never ordered to generate a fake “verified purchase” review under your name.
• Common items include cheap jewelry, seeds, phone accessories, and small electronics.
• Receiving one means your name and address were exposed, via a data breach or illegal purchase.
• You are not required to return or pay for unsolicited packages.
• You should report it, change your passwords, and enable two-factor authentication immediately.
• These scams spike around holiday shopping seasons and major sales events.

What Is a Brushing Scam?

A brushing scam is a type of marketplace fraud where a third-party seller ships an unsolicited package to a real person’s address, without their knowledge or consent and then posts a fake five-star “verified purchase” review using that person’s identity.

The goal isn’t to steal your money. The goal is to steal your identity as a reviewer. By creating a fake confirmed delivery, the seller can write a glowing product review that appears to come from a verified buyer, boosting their ranking on platforms like Amazon, AliExpress, eBay, or Walmart Marketplace.

The result: you get a confusing package, the seller gets a manufactured reputation, and other shoppers are misled into buying a product that may be low-quality or counterfeit.

How Brushing Scams Work (Step by Step)

1. The seller obtains your personal data Your name and address are sourced from a data breach, purchased from a shady data broker, or scraped from public records and social media profiles.
2. A seller account is created or used on a marketplace Platforms like Amazon, AliExpress, Walmart, or eBay are common targets. The seller may create a fake account or use an existing one.
3. The seller “orders” their own product to your address They place an order using your identity, but they’re the ones buying and shipping. You pay nothing.
4. A cheap item is shipped to you Lightweight, low-cost items (seeds, trinkets, jewelry) are chosen to minimize shipping costs. International shipping from China is common.
5. The delivery confirmation triggers a “verified purchase” status Once the package is marked delivered, the scammer can post a verified review as if you’re a real, satisfied customer.
6. The fake review boosts the product’s ranking More verified reviews = better search placement and sales. The cycle repeats with new targets.

Key Insight

You are not the victim of a purchase, you’re being used as a prop. Your home address was your only role in this fraud. But the data exposure behind it is where the real risk lies.

Why Is It Called a “Brushing” Scam?

The term originates from Chinese e-commerce culture, where the practice of shua dan (roughly translated as “brushing orders”) emerged on platforms like Taobao and Alibaba. Sellers would inflate their sales figures and review counts by “brushing up” fake transactions — creating the illusion of popularity and trustworthiness.

As Chinese marketplace sellers expanded globally onto Amazon, eBay, and other Western platforms, they brought the tactic with them. Today, brushing scams are a documented, global problem investigated by the FTC, Amazon, and consumer protection agencies worldwide.

Signs You’ve Received a Brushing Scam Package

Not every mystery package is a brushing scam — sometimes it’s a delayed gift or a misdelivered order. Here’s how to tell the difference:

Are Brushing Scams Actually Dangerous?

Yes, more than they appear. The package itself may seem harmless, but the underlying data exposure is serious. Here’s a breakdown of the real risks:

1. Your Personal Data Was Compromised

The most important fact: someone obtained your name and home address without your permission. This typically happens through a data breach, a shady data broker, a compromised retailer account, or a dark web data purchase. That same data leak may include your email address, phone number, or payment details.

2. You Could Be Targeted for Further Scams

Once scammers confirm your address is active (a delivered package confirms that), it can be passed to other bad actors for phishing attempts, package theft setups, or physical mail fraud.

3. Fake Reviews Under Your Name

Your Amazon or eBay account may be flagged or temporarily limited if the platform detects suspicious review activity tied to your profile. Some victims have had their accounts suspended before they realized what was happening.

4. Unsafe Items

Some brushing packages contain cosmetics, supplements, electronics, or seeds that are counterfeit, expired, chemically unsafe, or prohibited under import laws. Never consume or use items received in brushing scams.

Special Warning: Unknown Seeds

If you receive unsolicited seeds — especially from overseas — do not plant them. Unknown plant seeds can carry invasive species, pests, or plant diseases that are illegal to introduce in many countries. Report them to your country’s agriculture authority (USDA in the US, CFIA in Canada, DEFRA in the UK).

What to Do If You Receive a Brushing Scam Package

Follow these steps in order. Acting quickly reduces your risk of further harm.

1. Don’t open, use, or consume the item Especially cosmetics, food products, supplements, or electronics. Some items may be counterfeit or unsafe.
2. Check your marketplace accounts for unauthorized orders Log into Amazon, eBay, Walmart, etc. If you find an order you didn’t place, contact platform support immediately and report unauthorized account access.
3. Check for reviews posted in your name Go to your profile on the relevant platform and look for reviews you didn’t write. Report them as fraudulent.
4. Change your account passwords Use a unique, strong password for your shopping accounts and the email addresses linked to them. Consider using a password manager.
5. Enable two-factor authentication (2FA) Add 2FA to your marketplace accounts and linked email. This prevents unauthorized login even if your password was exposed.
6. Report the package to the platform and the FTC See the section below for platform-specific steps. Also file a report at reportfraud.ftc.gov.
7. Monitor your financial accounts Check bank statements and credit card bills for any unauthorized charges. Consider placing a fraud alert with the major credit bureaus (Equifax, Experian, TransUnion).

Can You Keep the Package?

Yes. Under U.S. law (15 U.S.C. § 45), you are not required to return or pay for any unsolicited merchandise. You may keep, donate, or discard it. Similar laws exist in Canada, the UK, and Australia. You should still report it — but you have no legal obligation to send it back.

How to Report a Brushing Scam (By Platform)

Each major marketplace has its own reporting process. Here’s exactly how to report on the most common platforms:

Amazon

1. Log into your Amazon account
2. Go to Account & Lists → Your Account
3. Select Report Unsolicited Package
4. Enter tracking number and package details
5. Amazon typically responds within 10 business days

eBay

1. Go to eBay’s Resolution Center
2. Select Report a Problem
3. Choose I received an item I didn’t order
4. Submit with as much detail as possible

Walmart

1. Visit Walmart’s Help Center
2. Select Contact Us → Something Else
3. Describe the unsolicited package
4. Include any shipping label info you have

FTC (US)

1. Visit reportfraud.ftc.gov
2. Select Online Shopping & Negative Reviews
3. Complete the form with all details
4. Reports feed the FTC’s Consumer Sentinel database

USPS (US)

1. If delivered via USPS, you can write “Return to sender — unsolicited” on the package
2. Leave it for your mail carrier — no cost to you
3. Report to USPS Postal Inspection Service at postalinspectors.uspis.gov

USDA (Seeds)

1. Do not open or plant the seeds
2. Keep them in the original packaging
3. Contact your state’s department of agriculture
4. Or call USDA APHIS at 1-800-877-3835

How to Prevent Brushing Scams

You can’t always stop your data from being leaked — data breaches affect even careful consumers. But you can reduce your exposure and catch problems early.

Protect Your Online Accounts

• Use unique passwords for every shopping and email account. Never reuse passwords across platforms.
• Enable two-factor authentication on Amazon, eBay, your email, and any platform linked to your payment details.
• Review your saved addresses on shopping platforms periodically and remove any you no longer use.

Reduce Your Data Footprint

• Opt out of data broker sites. Services like DeleteMe or manual opt-out requests to brokers like Whitepages, Spokeo, and Intelius can reduce how often your address appears in sold databases.
• Avoid entering your home address on sites you don’t fully trust. Use a PO Box or package locker for deliveries when possible.
• Unsubscribe from retailer marketing emails — fewer marketing lists means fewer exposure points.

Monitor for Early Warning Signs

• Keep a record of your online orders. Unknown packages stand out immediately if you track what you’ve ordered.
• Check your marketplace accounts monthly for reviews you didn’t write or orders you don’t recognize.
• Set up Google Alerts for your name to catch any unusual mentions online.
• Consider enrolling in a credit monitoring service that alerts you to new accounts or inquiries.

Shop Safely on Marketplaces

• Buy from established sellers with long track records and a high volume of verified, detailed reviews.
• Be skeptical of new storefronts with only 5-star reviews — short, vague, or repetitive reviews are a hallmark of brushing.
• Use platforms’ built-in tools (like Amazon’s Vine program) to distinguish verified organic reviews from fake ones.

Real Brushing Scam Stories from Reddit

Brushing scams can seem abstract until you hear from real people who experienced them. Here are two verified accounts shared in public forums:

r/Scams — Reddit User Experience

A Reddit user going by Durn3r27 described receiving a series of Amazon packages — including pocket knives — that they never ordered. At first, they assumed it was free merchandise. It was only after multiple deliveries that they connected the dots to brushing scams. They weren’t sure if reporting would stop future packages or just cut off the free items.

Posted approximately one year ago — upvoted and verified by the r/Scams community

r/Scams — Reddit User Experience

User PlushyKitten shared that they received shampoo and conditioner instead of the earrings they’d actually ordered. After researching the situation, they identified it as a brushing scam — and took swift action: changing their account credentials and reporting the incident to stop further deliveries.

Posted approximately nine months ago — response from r/Scams moderators confirmed it as a brushing scenario

These stories highlight two important points: brushing victims often don’t recognize the scam at first, and taking action — changing credentials and reporting — does help stop the cycle.

Your Legal Rights as a Brushing Scam Victim

You Can Keep the Item

In the United States, the FTC confirms that under federal law, receiving unsolicited merchandise means you have no legal obligation to return it or pay for it. You may treat it as a free gift. The same principle applies in the UK under the Consumer Protection (Distance Selling) Regulations, and in Australia and Canada under similar consumer protection frameworks.

Sellers Can Face Penalties

Brushing is explicitly against the terms of service of every major marketplace. Amazon, eBay, and Walmart have all taken enforcement action against brushing operations, including permanent account suspension and legal referrals. The FTC actively investigates fraudulent review schemes as a form of deceptive trade practice under Section 5 of the FTC Act.

Identity Concerns

While brushing scams do not constitute identity theft in the traditional sense, the underlying data exposure can enable it. If you believe your data has been more broadly compromised — not just your name and address, but financial details or login credentials — you should file a report with the FTC at IdentityTheft.gov and consider placing a credit freeze.

Frequently Asked Questions

Q1: What is a brushing scam?

A brushing scam is when a seller ships you an item you didn’t order so they can post a fake “verified purchase” review under your name. It artificially boosts the seller’s reputation and search ranking on platforms like Amazon, AliExpress, or eBay.

Q2: Why am I getting random packages from China or overseas?

Random packages from overseas sellers — especially lightweight, low-cost items — are a hallmark of brushing scams. Chinese e-commerce sellers commonly use this tactic to generate fake delivery confirmations and post verified reviews. The package is only worth a few cents to ship, but the review is worth much more in sales.

Q3: Is a brushing scam the same as identity theft?

Not exactly, but there’s overlap. A brushing scam uses your name and address without consent. It doesn’t directly steal money from you — but it does confirm that someone accessed your personal data, which is a risk factor for identity theft. If you receive brushing packages, treat it as an early warning to secure your accounts.

Q4: Do I need to return the package?

No. Under U.S. federal law, you are not required to return or pay for unsolicited merchandise. You may keep, donate, or discard it. Similar protections exist in the UK, Canada, and Australia. You should, however, report the package to the platform and the FTC.

Q5: Can brushing scams happen on Amazon?

Yes — Amazon is one of the most commonly targeted platforms. Amazon takes brushing seriously and has a dedicated reporting mechanism for unsolicited packages. If you receive one, report it through your Amazon account under “Report Unsolicited Package.”

Q6: I received seeds I didn’t order. What should I do?

Do not plant, open, or discard the seeds irresponsibly. Unknown seeds from overseas may carry invasive species, plant diseases, or pests that are harmful to local ecosystems and illegal to introduce. Contact the USDA (in the US), your state agriculture department, or the relevant authority in your country for guidance on safe disposal.

Q7: What’s the difference between brushing and a fake review scam?

Brushing is a specific type of fake review scam that requires physically shipping a product to create a “verified purchase” status. Other fake review scams may involve paying people to write reviews, incentivized review schemes, or entirely fabricated accounts — no physical delivery required. Brushing is more sophisticated because the “verification” is technically genuine.

Final Thoughts

A brushing scam package on your doorstep might feel harmless — or even like a lucky surprise. But it’s a clear signal: your personal information is circulating somewhere it shouldn’t be. The risks range from fake reviews under your name to potential account compromise and identity theft.

The good news is that with a few targeted steps — reporting the package, updating your passwords, enabling two-factor authentication, and monitoring your accounts — you can significantly limit the damage and stop the cycle.

Don’t ignore it. Report it. And use it as a prompt to audit your digital security before a more serious problem develops.