USPS Issues Urgent Warning: How the ‘Brushing’ Scam Puts Your Personal Info at Risk

Why Americans Should Treat Their Personal Information Like Cash

Imagine checking your mailbox and finding a package you never ordered. It might contain a small trinket—a pair of socks or a phone case—that on the surface seems like a harmless mix-up. However, the U.S. Postal Service (USPS) is warning that such unsolicited deliveries could signal a more sinister threat: the brushing scam. This scam uses your personal information to create fraudulent transactions and post fake reviews, thereby boosting the seller’s product ratings. With personal data being as valuable as cash, the USPS urges Americans to protect their information at all costs. This article explains how brushing scams work, their impact on consumers and e-commerce platforms, and what you can do to stay safe.

What Is a Brushing Scam?

Brushing scams are a form of e-commerce fraud. Scammers send out unsolicited packages—often containing low-value items—using stolen personal data to boost false online reviews on platforms such as Amazon and eBay. By doing so, they increase product visibility and attract legitimate buyers. U.S. Postal Inspector Kelly McNulty states, “These scams occur when a customer receives unsolicited packages containing low-cost items like household goods. The goal is to inflate product reviews and sales rankings.” Although the package itself might not cost you, the underlying danger is that your personal data may have been compromised for further fraudulent uses like identity theft and phishing.

How Brushing Scams Work

The Mechanics Behind the Scam

Brushing scams follow a multi-step process:

1. Data Collection:
   Scammers acquire your personal information—from name and address to sometimes even payment details—through data breaches, public records, or illicit online marketplaces. This data becomes the currency for their operations.

2. Fake Purchases:
   Equipped with your details, scammers create bogus accounts on e-commerce platforms and “purchase” items using fraudulent transactions. The resulting packages, containing low-cost goods, are then sent to your address.

3. Posting Fraudulent Reviews:
   Once the package is marked as delivered, the scammers use the recipient’s account to post glowing reviews that falsely verify the purchase. This manipulation boosts the seller’s product ratings and gives the appearance of legitimacy.

4. Repetition Across Multiple Accounts:
   Scammers repeat this process across various accounts, intensifying the impact and undermining trust in e-commerce ratings.

The New Twist: QR Code Phishing

Recent variations include the use of QR codes attached to these unsolicited packages. When scanned, these codes can direct you to phishing sites designed to steal even more sensitive data or install malware. The USPS explicitly warns consumers to avoid scanning QR codes from unknown or unexpected packages.

Why the USPS Is Raising the Alarm

On June 29, 2025, as part of its ongoing “Project Safe Delivery” initiative, the USPS issued a stern warning to consumers. This campaign, started in 2023, targets mail-related fraud and has sparked thousands of arrests. Doug Tulino, Acting Postmaster General, remarked, “Combating mail theft and violent crimes against our employees is of the highest priority for the Postal Service. We are committed to making America’s mail system safer.” The emphasis is clear: if you receive an unsolicited package, treat your personal information as if it were cash. Once compromised, it is nearly impossible to regain the same level of security.

Real-World Examples and Trends

Significant Statistics

Recent data shows the rapid rise of brushing scams in the United States. A report from the United States Postal Inspection Service (USPIS) revealed that since the initiation of Project Safe Delivery, over 2,800 arrests have been made in mail-related fraud cases, with 1,200 cases linked directly to brushing scams. Although brushing scams might not always lead to direct financial losses, they are part of a broader fraud ecosystem that cost U.S. consumers billions in fraudulent losses.

Notable Cases

• Amazon and eBay Scams:
  Numerous victims have reported receiving random, low-value items such as phone cases, socks, or small gadgets, only to find that their names are used online to post fraudulent reviews.

• Mysterious Seed Packets:
  In one high-profile instance, U.S. residents received seed packets from overseas senders. This incident not only raised concerns regarding personal data misuse but also potential biosecurity risks, prompting warnings from agencies like the USDA.

• QR Code “Quishing”:
  In 2024, several cases emerged where brushing packages included QR codes. Victims who scanned them were redirected to websites crafted to mimic legitimate entities, designed to capture sensitive data like Social Security numbers and bank details.

The Federal Trade Commission (FTC) reported that U.S. consumers lost approximately$12.5 billion to fraud in 2024—a 25% increase from the previous year—highlighting the growing threat of such scams.

Why Brushing Scams Matter

Impact on Consumers

The implications of brushing scams extend far beyond receiving an unsought package:

• Privacy Breach:
  Your personal information is exposed, setting the stage for identity theft and unauthorized account activities.

• Damage to Reputation:
  The fraudulent use of your identity to post reviews may lead to complications with your online accounts, including potential bans on e-commerce platforms.

• Financial Risks:
  Scammers may exploit your data further to open fraudulent accounts or siphon funds, placing you at long-term financial risk.

Impact on E-Commerce Platforms

• Erosion of Trust:
  Fake reviews degrade the reliability of online ratings and reviews, causing genuine sellers to lose visibility and customers to lose trust in platforms.

• Unfair Market Competition:
  Ethical sellers suffer directly as deceptive practices drive misleading product rankings.

• Increased Operational Costs:
  E-commerce platforms are forced to invest heavily in fraud detection and review verification processes, diverting resources from other crucial improvements.

What to Do If You Receive a Brushing Package

Recommended Steps

1. Stay Calm and Assess the Situation:
   Receiving an unexpected package can be alarming. Instead of panicking, understand that this could be a sign your data is compromised.

2. Avoid Scanning Metadata-Linked QR Codes:
   Do not scan any QR codes on such packages, as they might lead to phishing sites. Protect your device and personal data.

3. Accept or Dispose:
   Legally, unsolicited items are yours to keep. If the package appears safe, you can dispose of it, though consider reporting it to authorities.

4. Return to Sender if Possible:
   If the package is unopened and includes a return address, mark it “RETURN TO SENDER” and send it back. This may deter further misuse of your data.

5. Report the Incident:
   Immediately report the package to the USPS Inspection Service at 1-877-876-2455 or file a report online. Inform the associated online retailer—such as Amazon or eBay—so they can remove any fraudulent reviews linked to your name.

How to Protect Your Personal Information

Essential Protective Measures

• Guard Your Data:
  Treat all personal information like cash. Only share sensitive data when absolutely necessary, and avoid oversharing on public platforms.

• Strengthen Online Security:
  Update your account passwords regularly and enable two-factor authentication to secure your online profiles.

• Monitor Financial Activity:
  Regularly check your bank statements and credit reports for any signs of unauthorized transactions.

• Be Wary of Phishing Attempts:
  Do not click on links or scan QR codes from unsolicited emails, texts, or packages. These are common tactics used by scammers to harvest your information.

• Report Fraud Promptly:
  If you suspect that your data is being misused or if you receive an unexpected package, report these incidents immediately. Prompt reporting can help authorities trace and prevent further fraudulent activities.

Common Misconceptions About Brushing Scams

Despite frequent media reports, several misconceptions about brushing scams persist:

“It’s Just Free Stuff—No Harm Done.”

Some believe that receiving an unsolicited package is inconsequential because you get a free item. However, this free gift indicates that your personal data is being exploited for larger fraudulent schemes that could cost you dearly in the long run.

“Returning the Package Stops the Scam.”

Returning the package might seem like the obvious remedy, but it can inadvertently confirm your address to scammers, potentially leading to more unsolicited deliveries. Authorities recommend reporting the incident instead.

“Brushing Scams Only Affect Online Reviews.”

While the primary goal may be to manipulate product reviews, the broader risk is that your personal information is compromised. Once your data is out there, it can be used in a variety of further scams, including identity theft and credit fraud.

Stay Vigilant, Stay Safe

Brushing scams serve as an important wake-up call. The practice is far from harmless—it signals that your personal information is in the wrong hands, putting you at risk of identity theft, financial fraud, and other crimes. The USPS’s warning is clear: treat your personal data like cash and take every precaution to safeguard it. Stay alert, monitor your accounts, and report any suspicious activity immediately. Taking these proactive steps not only protects you but also contributes to the broader fight against fraud, ensuring that America’s mail system remains secure.