Imagine receiving a package you never ordered. You open it, confused, only to find a cheap item inside. At first, it might seem like a mistake or even a gift. But in reality, this could be part of a brushing scam—a shady trick used by online sellers to boost their product rankings.
Brushing scams are a growing issue, especially on platforms like Amazon, Walmart, and Temu. Reports of brushing scams USPS cases have increased in 2025, and more victims are being targeted every day. But why is this happening? And how can businesses and consumers protect themselves? Let’s break it down.
What Is a Brushing Scam?
A brushing scam is when sellers send unordered packages to random people to fake positive reviews on online marketplaces. Since online stores rank products based on verified purchases and customer reviews, these fake orders boost product rankings and trick real buyers into thinking an item is more popular than it is.
These scams are not harmless. They involve fraudulent data use, false marketing tactics, and potential identity theft. Many victims of the Amazon brushing scam or Walmart brushing scam have no idea how their personal information was obtained.
But why is it called brushing?
The term brushing comes from the idea of “brushing up” a seller’s reputation. By sending out fake orders and writing false reviews, these sellers make their products look more popular than they actually are. This dishonest tactic is meant to manipulate online algorithms and attract more customers.
How Brushing Scams Work?
Brushing scams exploit online shopping platforms to create fake sales records. Here’s how they work:
- A scammer gets access to real customer information (often through data leaks or hacked accounts).
- They create fake orders using the victim’s name and address.
- The seller ships a cheap or random item (sometimes just an empty package) to the victim.
- A fake review is posted under the victim’s name on the shopping platform.
- The product gains higher rankings, making it more visible to real buyers.
Victims often ask, “How did they get my address?” Unfortunately, personal data is bought and sold online, and scammers use it for different types of fraud, including brushing scams.
What to Do If I Receive a Package I Didn’t Order?
If you receive a package and have no idea who sent it, follow these steps:
- Do not open the package if it looks suspicious.
- Check if someone in your household ordered it.
- Do not pay for anything. Brushing scams do not require you to make payments, but scammers may try to trick you into thinking you owe money.
- Report brushing scams to the online store (Amazon, Walmart, or Temu) and to authorities like the FTC (Federal Trade Commission).
- Monitor your accounts for signs of fraud, such as unauthorized purchases.
If you receive a brushing scam QR code, do not scan it. It could be linked to phishing websites or malware.
How to Stop Brushing Scams?
Protecting yourself from brushing scams requires caution and security measures. Here’s what businesses and consumers can do:
- Secure your online accounts. Use strong passwords and enable two-factor authentication.
- Remove personal information from public websites. Scammers often collect data from old data breaches or social media.
- Report brushing scams to shopping platforms and law enforcement.
- Be careful with unsolicited packages. Never scan a QR code brushing scam, as it could be designed to steal personal information.
Businesses should also take action to prevent fraud on their platforms and educate customers about these scams.
Examples of Brushing Scams
Here are some of the most common brushing scams taking place on the internet right now:
USPS Brushing Scam
The USPS brushing scam involves fake packages being delivered through the U.S. Postal Service. Victims report receiving packages labeled “gift” or “free sample” when they never made a purchase.
How to report it
- Contact USPS Postal Inspection Service at 1-877-876-2455.
- Report to the FTC at ReportFraud.ftc.gov.
- Visit identitytheft.gov to check if your personal information has been misused.
- Place a fraud alert on your credit report with Equifax, Experian, or TransUnion.
Bautero Brush Scam
The Bautero brush scam became widely known when customers started receiving mystery beauty products they never ordered.
How to report it
- Contact Amazon or Walmart customer support if the product came from their platform.
- File a complaint with the Better Business Bureau (BBB).
- Report the scam to consumer protection agencies in your state.
- Review your online shopping accounts for unauthorized orders.
QR Code Brushing Scam
Some scammers use QR codes on fake packages to direct victims to fraudulent websites.
How to report it
- Do not scan the QR code.
- Report the suspicious package to the online marketplace it came from.
- Alert cybercrime units or local law enforcement.
- If a scam website loads, close it immediately and clear your browser history.
Temu Brushing Scam
Temu, a fast-growing online shopping platform, has also been linked to brushing scams.
How to report it
- Contact Temu customer support via their website.
- Report the scam to the FTC.
- If the scam involves a stolen identity, file a complaint at identitytheft.gov.
- Consider placing a fraud alert on your credit file if you believe your personal data is at risk.
Business Risks of Brushing Scams
Brushing scams don’t just affect individuals. They hurt businesses too. Here’s how:
- Fake reviews create unfair competition – Honest businesses struggle to compete with fraudulent sellers.
- Loss of customer trust – Customers become skeptical of online reviews, making it harder for legitimate businesses to build credibility.
- Distorted market data – False transactions skew sales reports and analytics, making it harder for businesses to make informed decisions.
To stay ahead, businesses need to monitor for fraudulent activities and invest in data security solutions.
How PureWL Can Help Businesses Strengthen Their Security?
Brushing scams often involve data leaks and unauthorized access to personal information. Businesses must take action to secure customer data and prevent fraudulent activity.
PureWL offers white-label VPN solutions to help businesses strengthen their cybersecurity infrastructure. With a white-label VPN, companies can:
- Encrypt customer and employee data to protect against cyber threats.
- Prevent hackers from intercepting online transactions.
- Secure remote workers and business networks from phishing and identity theft.
- Offer a branded security solution to customers, increasing brand trust and revenue.
For businesses looking to enhance online security, a white-label VPN from PureWL is a powerful solution.
Final Thoughts
Brushing scams are more than just a nuisance. They are a threat to honest businesses and a violation of consumer trust. Scammers exploit online platforms to gain fake positive reviews, mislead buyers, and compromise personal data.
By staying informed and taking security precautions, both businesses and consumers can protect themselves from brushing scams in 2025 and beyond.
Want to strengthen your online security? Visit PureWL to learn more about privacy-focused solutions for businesses.