Unexpected Amazon packages could be part of a brushing scam designed to manipulate product reviews and expose your personal information.
The Amazon Brushing scam is a deceptive fraud operation where sellers send random products to real people without permission. The goal is to create fake “verified purchase” reviews that boost product rankings and sales on online marketplaces. In some cases, the scam also exposes victims to identity theft, phishing attacks, or account compromise.
| Threat Details | Information |
|---|---|
| Threat Type | Brushing Scam / Fake Review Fraud |
| Associated Email | Usually none; sometimes linked to fake Amazon confirmations |
| Detection Names | Amazon Brushing Scam, Fake Verified Purchase Scam |
| Symptoms | Receiving packages you never ordered, strange Amazon reviews, archived orders, unfamiliar payment methods |
| Damage & Distribution | Fake reviews, leaked personal data, possible account compromise, phishing links, QR-code scams |
| Danger Level | Medium |
| Removal Tool | SpyHunter |
How Amazon Brushing Scam Tricks Users
The scam starts when third-party marketplace sellers obtain real names and addresses from leaked databases, breached accounts, or public records. They then create fake customer accounts or compromise existing ones to place orders for their own products.
Once the package is delivered, the scammer posts a “verified purchase” review to artificially improve the product’s reputation and visibility on Amazon. Since verified reviews carry more weight in ranking systems, the tactic helps dishonest sellers manipulate buyers.
Many victims receive cheap items such as phone accessories, kitchen gadgets, jewelry, USB cables, beauty products, or small electronics.
More aggressive brushing scams now include QR codes inside packages. Scanning these codes can redirect victims to phishing websites or trigger malware downloads.
Some reports also show compromised Amazon accounts where scammers archive orders to hide them from victims.
Full Text of the Amazon Brushing Scam Message
In many brushing scams, there is no direct message at all. Victims simply receive an unexpected package.
However, some variants include inserts, QR cards, or fake customer support notes such as:
“Scan this QR code to find out who sent your gift.”
Others encourage users to:
- Leave a positive review
- Register the product online
- Claim a reward or gift card
- Confirm shipping details
These messages are designed to harvest login credentials, payment data, or personal information.
What Happens If You Fall for Amazon Brushing Scam
The brushing scam itself usually does not charge your credit card directly, but it signals that your personal data may already be circulating among scammers.
Potential risks include:
- Amazon account compromise
- Fake reviews posted under your identity
- Phishing attacks
- Identity theft attempts
- Malware infections from QR codes or fake links
- Exposure of saved payment methods
If your Amazon account shows unauthorized orders, archived purchases, or unfamiliar payment cards, treat the incident as a possible account breach immediately.
What You Should Do Immediately
- Change your Amazon password
- Enable two-factor authentication (2FA)
- Review archived orders carefully
- Remove unknown payment methods
- Report the package to Amazon customer support
- Avoid scanning QR codes from mystery packages
- Monitor bank statements and credit reports
- Run a malware scan if you interacted with suspicious links or files
Conclusion
The Amazon Brushing scam may look harmless at first because victims often receive “free” items. In reality, it’s a large-scale fake review operation tied to leaked personal information, account abuse, and sometimes phishing or malware attacks.
If random packages start appearing at your address, don’t ignore them. Secure your Amazon account, review your online security settings, and avoid interacting with suspicious inserts, QR codes, or links included in the shipment.
