WASHINGTON, June 28 (DC Times Online) — An unexpected envelope or package in the mail can be more than junk. The U.S. Postal Inspection Service says it may be part of a brushing scam, a fraud scheme that uses your address to make fake online reviews look real.
What is a brushing scam?
The Postal Inspection Service says brushing scams are illegal in the United States. In a brushing scam, a sender — often an overseas third-party seller — mails someone a package or parcel they did not order.
The reason is not to deliver a product. The goal is to make it look as if the person received and approved the item, so the seller can post a positive review in that person’s name. The Postal Inspection Service says the fake review can help boost sales and ratings.
Why are QR codes a concern?
Federal consumer warnings say some of these mystery mailings now include a QR code. The Postal Inspection Service calls that newer variation “quishing,” a QR-code version of phishing.
The Federal Trade Commission says scanning an unexpected QR code could send a person to a fake website that tries to steal personal information or install malware. In other words, the code itself can be the trap.
What should you do if one shows up?
The Postal Inspection Service says people who receive unsolicited merchandise should report it to the Postal Inspection Service.
It also says recipients may keep unsolicited merchandise by law. If the item is unopened and has a return address, it can be sent back. If it has been opened and it is safe to do so, it can be disposed of.
If there is any chance personal information was exposed, the Postal Inspection Service says to change passwords and watch credit reports and credit card bills closely.
Should you contact the sender?
Consumer guidance quoted in other federal-safety coverage says not to contact the sender, because that could confirm your address and lead to more unwanted mail.
The safest rule
If a package, parcel, or envelope arrives that you did not request — especially if it includes a QR code — do not scan it just to see what it is. Federal agencies say the better move is to treat the mail as suspicious, report it, and avoid giving away information that could help a scammer.
