⚑ Scam alertNovember 18, 2026
The FTC says a package you never ordered could be part of a "brushing" scam. In a consumer alert dated August 20, 2026, the agency says scammers use your name to post fake reviews, and some packages carry a QR code note that could lead to a fake website.
The short version
Who's warning: The FTC
Who it targets: Anyone who gets a package they didn't order
How it reaches you: A package at your door, sometimes with a QR code note
The giveaway: Cheap, random items you never ordered
How the scam works
According to the FTC, the package may look like it came from a well-known company such as Amazon, or from a sender you've never heard of. It is addressed to you. The FTC says that, based on recent reports, it usually holds something cheap and random, like baby wipes, toothpaste, or seeds. The FTC says the scammers' goal is to get the delivery marked as validated, then use your name to post fake reviews of their business. The agency calls this a "brushing" scam. The FTC's warning says scammers may pose as a known company, which does not mean that company is behind it.
The FTC says some packages include a note with a QR code. The note tells you to scan it to find out who sent the package or to process a return. The FTC says scanning could lead to a fake website built to steal card numbers, usernames, or passwords. The agency also says an unexpected package can be a sign that someone has, or wants, your personal information. The FTC's alert does not give a count of how many people have received these packages.
What the FTC says to do
The FTC recommends changing the passwords on your online shopping accounts. If the package came through Amazon or another marketplace, it says to message the platform so it can look at removing the seller. The agency suggests checking your credit weekly for free at AnnualCreditReport.com. The FTC says the law means you don't have to return or pay for things you didn't order. It also says to be cautious about using the product, since you don't know who sent it. The FTC asks people to report these packages at ReportFraud.ftc.gov.
What to do
Per the FTC: don't scan a QR code that came with a package you didn't order, and change your online shopping passwords.
If it came through a marketplace like Amazon, message the platform. You don't have to return or pay for items you didn't order, the FTC says.
Report it at ReportFraud.ftc.gov. Read the full warning: FTC consumer alert on brushing scams.
The FTC's alert, dated August 20, 2026, remains posted on its consumer site. The agency says an unexpected package can be a sign someone has, or wants, your personal information.
Sources
FTC Consumer Alert: That unexpected package you got could be a brushing scam, August 20, 2026
This story is based on the records and reports linked above. Charges, lawsuits, and other accusations are claims, not findings of guilt or liability, unless the story says a court has ruled.
