untrappable.Check

Brushing scam: why did a package I didn't order arrive?

Editorially reviewed · Last updated September 8, 2026

Yes — this is a scam. An unordered parcel may be part of a brushing scam used to manufacture reviews. A package alone does not prove that; check the addressee and order history first.

Exhibit · Text message

Text Message · Today 11:20 AM
from Parcel Rewards
Your free gift has shipped! Scan the QR code in your package or tap here to confirm delivery and claim your reward: parcel-rewards[.]info/claim
Illustrative text message · not an original screenshot

Other versions you might get: Unexplained rings, seeds, samples, chargers, or other items can be sent in brushing schemes. A parcel may also be a gift or misdelivery. In the US, genuinely unordered merchandise sent to you does not create a payment obligation, but that is not permission to keep mail addressed to someone else.

What to do right now

  1. Keep the package — you don't have to pay or send it back. The FTC says the law does not require you to return unordered merchandise. Be cautious about using the product; you don't know who sent it.
  2. Don't scan any QR code or tap any link that came with it. The FTC says a note may tell you to find the sender or process a return; that can open a phishing site for card numbers, usernames, or passwords.
  3. Change passwords on your online shopping accounts. If the package looks like it came from Amazon or another marketplace, message that platform from an account you already have so they can look at the seller.
  4. Check your credit reports weekly for free at AnnualCreditReport.com and watch for identity theft.
  5. Report it at reportfraud.ftc.gov.

Reduce the risk of another scam

Do not use the message’s link to check the claim. Open the real service yourself. If you paid or shared account details, start with what to do after a scam. Blocking and reporting can reduce unwanted contact, but they cannot stop every attempt or tell you how the sender found you.

● Public service · free steps first

Take the free protection steps first

A suspicious message does not tell us how someone found your details. If you shared personal information, start with the official recovery guidance. You can also freeze your credit for free.

Decide what protection you need

Start with the free controls above. Compare what a paid service would add only after deciding which problem remains.

Compare free and paid protection →

No purchase needed. How we use evidence.

Frequently asked

I got a package I didn't order — is it dangerous to keep?
First check the addressee and whether it could be a gift or delivery mistake. In the US, genuinely unordered merchandise sent to you does not create a duty to pay or return it. That is different from mail addressed to someone else. Avoid unexpected QR codes and do not use or handle contents that appear unsafe.
Why did I get a brushing package?
In a brushing scheme, a seller sends an item to create an apparent transaction or support fake reviews. An unexplained parcel alone does not prove that scheme or show how your address was obtained. Check the addressee and order history independently and report suspicious account activity.
Should I scan the QR code to find out who sent it?
No. The FTC says a QR code or note may tell you to find the sender or process a return. Scanning can open a phishing site that steals card numbers, usernames, or passwords. There's no safe reason to scan it. Log in to your shopping accounts directly if you want to check your order history.
Should I check my credit after a brushing package?
Yes. The FTC says an unexpected package can be a sign that someone has, or is looking to steal, your personal information. Check your credit reports weekly for free at AnnualCreditReport.com and watch for identity theft.
What should I do if I was actually charged for it?
If there is an unauthorized charge, contact your card issuer and the shopping platform promptly, dispute the charge, and check the account for misuse. A genuine delivery error and a fraudulent purchase need different handling, so keep the package and payment records while the provider investigates.

Related scams

TextScam

Package delivery scams: fake texts and mystery parcels

Got a delivery text with a tracking link, or a package you never ordered? Here are the two common package scams and exactly what to do.

TextScam

USPS text scam: is that delivery text real?

Got a USPS text about a held package, an address problem, or a redelivery fee? Here's the verdict and exactly what to do.

TextScam

Amazon text scam: is that message real?

Got a text about an Amazon order, account hold, or delivery problem you don't recognize? Here's the verdict and exactly what to do.

Sources

  1. 01That unexpected package you got could be a brushing scam— Federal Trade Commission
  2. 02Got a package you didn't order? It's probably a scam— Federal Trade Commission
  3. 03Scam alert: QR code on an unexpected package— Federal Trade Commission
  4. 04Getting unordered merchandise in the mail?— Federal Trade Commission
  5. 05Report fraud to the FTC— Federal Trade Commission
  6. 06What To Do if You Were Scammed— consumer.ftc.gov

Pass it on

Help protect someone else

If this could have fooled you, it can fool someone you know — a parent, a friend, the family group chat. It's safe to forward, and stands on its own as a record for a bank or the police.