Is it safe to open a mysterious package from the brushing scam?

In 99% of cases, yes. Most brushing packages contain cheap, harmless items like phone cases, seeds, or empty boxes. If the package looks suspicious—such as if it is leaking, vibrating, or you are genuinely concerned—there is no rule saying you have to open it. When in doubt, toss it out.

Received a Package You Didn’t Order? You’ve Been "Brushed."

Q: Why did they pick me? Did they target me specifically?

Probably not. Scammers use automated scripts to churn through thousands of addresses harvested from old data breaches. You were not specifically picked; you were just caught in a very wide net.

MovingHelpCenter.com

Jul 16

4 min read

In the moving industry, we know that a box represents a big transition - a new home, a new life, and the start of a new chapter. But lately, many people have been finding boxes on their porches that feel more like a glitch in the matrix than a new beginning.

If you’ve ever walked to your mailbox or porch expecting a package you actually ordered, only to find a mystery parcel - or a box addressed to you from a store you’ve never even heard of - your personal data may have landed you in the middle of a "Brushing Scam."

First Things First: Take a Deep Breath

If you’re staring at a package you didn’t order, stop and take a deep breath. Here is the good news: You haven't been robbed, and you aren't paying for this.

You didn’t pay for the item, and you don’t owe a cent for it. According to the Federal Trade Commission (FTC), you are under no obligation to pay for or return merchandise you didn’t order. It is legally yours to keep, donate, or - if it’s just a bag of random plastic trinkets - toss in the recycling bin. Your bank account is likely perfectly safe, and no one has hacked your credit card.

The "Brushing" Blueprint: Why Did You Get a Mystery Gift?

So, if it isn't a financial scam, why is someone sending you free stuff? It’s a game of "fake it ‘til you make it" played by unscrupulous third-party marketplace sellers. Here is how the trick works:

Data Harvesting: A seller grabs your name and address from older data breaches or public records.
The Fake Order: They use your information to place a fake order for their own product through a major e-commerce platform.
The "Delivery": They ship an inexpensive item to your address. Because the package is marked "delivered" with a valid tracking number, the platform’s algorithm now considers it a "verified purchase."
The "Verified" Review: Now for the payoff: The seller writes a glowing, fake review under your name. To the platform’s system, this makes their store look legitimate and high-performing, allowing them to deceive other, unsuspecting shoppers.

Basically, you’ve been used as an unwitting "verified buyer" to help someone else’s fake store look like the real deal.

Why You Should Still Be Careful

While your bank account is safe, the fact that your address was used is still a red flag. It confirms that your personal information is floating around in places it shouldn't be. While the package itself is usually harmless (unless it’s, like, a box of live bees - which, thankfully, is rare), receiving one is a sign that your data is exposed, which could lead to more annoying spam or phishing attempts in the future.

What Should You Do Now?

Keep or Toss: Again, it’s legally yours. Enjoy the weird freebie, or if it’s just junk, throw it away.
Audit Your Accounts: Log into your primary shopping accounts (like Amazon or other major retailers). Check your "Order History" to ensure no one has been using your actual account to place orders. If your account history is clean, you’re just a victim of data harvesting, not an account hack.
Refresh Your Security: If you’re worried, now is the perfect time to update your passwords and flip on Two-Factor Authentication (2FA).
Report It: Notify the e-commerce platform the package is associated with. Reporting it helps them identify and shut down the fraudulent seller’s account.

A Note for My Moving Friends

If you are currently in the middle of a move, be extra vigilant. Transitions are the perfect time for data to slip through the cracks. Keep a close watch on your mail forwarding and address changes. If you start receiving strange packages at your new home, it’s a sign that your information might have been caught up in a data list during your move.

The Bottom Line

In our line of work, we value precision, trust, and making sure the right boxes get to the right places. If you receive a mysterious package, don't panic—it’s just a weird side effect of the modern digital age. Just take it as a friendly reminder to keep your digital security as organized as your moving boxes.

Frequently Asked Questions (FAQ)

Q: Is it safe to open the package?

A: In 99% of cases, yes. Most "brushing" packages contain cheap, harmless items like phone cases, seeds, or empty boxes. However, if the package looks suspicious - like it’s leaking, vibrating, or you are genuinely concerned - there is no rule saying you have to open it. When in doubt, toss it out.

Q: Should I contact the seller?

A: Generally, no. Contacting the seller just confirms to them that your address is "active" and that you’re a real person who pays attention to their mail. This could lead to more spam or junk mail. It’s better to report them to the platform they used (like Amazon) and let the pros handle the shutdown.

Q: Will this affect my credit score?

A: No. Because no real purchase was made using your credit card or bank account, this has absolutely no impact on your credit, your bank balance, or your financial identity.

Q: Why me? Did they specifically pick me?

A: Probably not. These scammers use automated scripts to churn through thousands of addresses harvested from old data breaches (we’re talking about those lists of leaked emails and addresses that have been floating around the web for years). You weren't "picked" - you were just caught in a very wide net.