What is a brushing scam? What to watch out for

If you've ever received a mysterious package you didn't order, you're not alone. It could be part of a brushing scam.

A brushing scam happens when sellers — often from online marketplaces — send items to random people and mark them as "verified purchases" so they can leave fake, five-star reviews. The goal? Boost the product’s ratings and visibility, making it more appealing to real shoppers. It may sound harmless at first, but it can come with some unexpected risks.

How brushing scams work

There are a few steps for how a brushing scam comes to fruition. 

1. A seller creates fake accounts using real names and addresses, often scraped from data breaches or public records.

2. They ship small, low-cost items (think hair ties, cheap electronics, or novelty items) to these addresses.

3. They write glowing reviews under the recipient's name to boost product rankings and credibility.

Be a financially smart family!

Be a financially smart family!

From saving for the future to understanding credit, see how families are thriving with Greenlight.

Try Greenlight today

The kicker? The item is legally yours. But your name and address might be circulating in ways you didn’t authorize.

Why do scammers do this?

Brushing scams are all about visibility and perceived trust. On large marketplaces, products with higher ratings and more reviews appear more trustworthy. By gaming the system with fake orders and reviews, unethical sellers can rise to the top of search results, outpacing legitimate competition.

Some scammers may also be testing whether your address is valid, potentially opening the door for more serious fraud down the road.

Is brushing illegal?

Brushing isn’t always illegal, but it usually violates the terms of service for major retailers like Amazon or eBay. The reviews written under your name without your consent could constitute identity misrepresentation. And if your data was accessed without permission? That’s a red flag for larger data security concerns.

What to do if you get a package you didn’t order

If you receive a mystery package, here’s what you can do:

• Don’t pay for it. If it’s addressed to you and there’s no invoice, it’s yours. That’s U.S. law.

• Report it to the retailer. Platforms like Amazon have dedicated forms to report brushing scams.

• Change your account passwords. Especially if the item matches something you've searched for or purchased recently.

• Check your credit reports. Your data might be out there — keep an eye on any new activity.

• Report it to the FTC. This helps them track scam trends and protect others.

Can brushing scams lead to identity theft?

They can. If your name, address, or phone number were used without your permission, scammers may have more personal data than you think. It’s possible they could try opening accounts in your name or selling your information online.

How to protect your family

The best way to stay safe is to stay informed. Here are a few tips:

• Use strong, unique passwords for every account.

• Set up fraud alerts through your bank or a credit monitoring service.

• Teach your kids not to share personal info—even in games or social apps.

• Talk openly as a family about online privacy and scams. Knowledge is power.

Protect yourself for peace of mind

Brushing scams might seem like a strange inconvenience, but they can be a sign of bigger issues. Taking the right steps early can help protect your identity, your accounts, and your peace of mind.

Protect your $ and family. Keep everyone's safety and finances in check with Greenlight — the all-in-one educational money app. Try Greenlight, one month, risk-free.†  

This blog post is provided "as is" and should not be relied upon as a substitute for professional advice. Some content in this post may have been created using artificial intelligence; however, every blog post is reviewed by at least two human editors.

* Provided by Virginia Surety Company, Inc., cell phone protection is not available to residents of New York.