Amazon Brushing Scam

Unexpected Amazon packages could signal a brushing scam tied to fake reviews and exposed personal data

Receiving an Amazon package you never ordered may seem harmless at first, but it’s often connected to a large-scale fake review operation known as an Amazon brushing scam. In these schemes, online sellers use real names and addresses to create fake “verified purchase” reviews that artificially boost product rankings on marketplaces like Amazon.

While victims usually aren’t charged directly, the scam is still a warning sign that personal information such as your name, address, phone number, or even account credentials may already be circulating in leaked databases.

How Amazon Brushing Scam Tricks Users

The Amazon brushing scam works by exploiting marketplace review systems. Sellers create fake customer accounts or compromise existing ones, then place orders for their own low-cost products using stolen or harvested personal information.

Once the item ships to a legitimate address, the seller can leave a “verified purchase” review that boosts the product’s reputation and visibility in search results.

The packages often contain:

• Cheap electronics
• Phone accessories
• Kitchen gadgets
• Jewelry
• Random household items

In more advanced versions of the scam, recipients are encouraged to scan QR codes included in the package. Those codes may redirect victims to phishing websites or attempt to install malware on mobile devices.

Some brushing incidents are linked to compromised Amazon accounts. Victims have discovered hidden archived orders, unauthorized payment methods, and fake product reviews posted from their profiles.

Full Text of the Amazon Brushing Scam Message

The Amazon brushing scam usually does not rely on a traditional phishing email. Instead, victims receive:

• An unexpected package
• A fake “gift” message
• QR codes claiming to reveal the sender
• Shipping confirmations for items they never purchased

Common wording includes:

“Scan this code to see who sent your gift.”

Or:

“You’ve received a surprise promotional item.”

These messages are designed to lower suspicion and encourage interaction with malicious links or fake review systems.

What Happens If You Fall for Amazon Brushing Scam

In many cases, recipients are not financially harmed immediately. However, the scam becomes more serious if attackers gained access to an actual Amazon account.

Potential consequences include:

• Fake reviews posted under your identity
• Compromised Amazon credentials
• Unauthorized payment methods added
• Exposure to phishing attacks
• Identity theft risks
• Malware infections from malicious QR codes

If you receive an unsolicited package:

1. Check your Amazon order history and archived orders.
2. Change your Amazon password immediately.
3. Enable two-factor authentication.
4. Remove unknown payment methods.
5. Avoid scanning QR codes from mystery packages.
6. Report the seller and package to Amazon support.
7. Monitor bank statements and email accounts for suspicious activity.

Security researchers and consumer protection experts warn that brushing scams are often tied to leaked personal data purchased from underground databases.

Conclusion

The Amazon brushing scam is more than just receiving random free items. It’s a form of marketplace fraud that abuses customer identities to generate fake reviews and manipulate product rankings. In some cases, it can also indicate that your personal information or Amazon account has been compromised.

Treat any unexpected package seriously. Review your account activity, secure your passwords, and avoid interacting with suspicious QR codes or links included with mystery deliveries.