The Signal 10/7/26 - Why did I get a package I never ordered? · The Signal · Radar

How Brushing Scams Work0:51 – 2:46

0:51

The practice is called brushing, and the FTC renewed its warning about it this summer because reports keep climbing.

0:58

Here's the whole mechanism, and it's almost funny once you see it.

1:02

Online marketplaces reward sellers for reviews, especially reviews marked verified purchase, which require an actual order shipped to an actual address.

1:14

So, a seller, typically an overseas operation pushing cheap or knock-off goods, wants a pile of those.

1:22

They can't fake the shipment, but they can fake the buyer.

1:26

They take real names and addresses, yours, pulled from a leak or a data broker, place orders under accounts they control, ship the cheapest thing in the catalog so the tracking says delivered, then post a glowing five-star review under your name.

1:42

The box on your porch is the receipt that makes the fake review look real.

1:47

You're not the customer, you're the alibi.

1:49

The item is cheap because it's a prop.

1:52

Seeds and baby wipes are classic because they ship for pennies.

1:57

The ring with a certificate is a flourish.

2:01

It looks like a gift, so you'll keep it and never question it.

2:05

And the new wrinkle, which is why this earns a full episode now.

2:10

The card inside with a QR code.

2:12

Scan to see who sent this.

2:14

Scan to register your jewelry.

2:16

Scan to arrange a return.

2:19

The Postal Inspection Service has flagged this specifically.

2:23

The package is the bait and the code is the hook, leading to a page that asks for personal information or worse.

2:30

If you heard our QR episode two weeks ago, you already know the rule.

2:35

A QR code is a link you can't read, and an unsolicited one never gets scanned.

2:41

A code that arrived in a box you didn't order is the purest example on earth.

How Brushing Scams Work0:51 – 2:46

0:51

The practice is called brushing, and the FTC renewed its warning about it this summer because reports keep climbing.

0:58

Here's the whole mechanism, and it's almost funny once you see it.

1:02

Online marketplaces reward sellers for reviews, especially reviews marked verified purchase, which require an actual order shipped to an actual address.

1:14

So, a seller, typically an overseas operation pushing cheap or knock-off goods, wants a pile of those.

1:22

They can't fake the shipment, but they can fake the buyer.

1:26

They take real names and addresses, yours, pulled from a leak or a data broker, place orders under accounts they control, ship the cheapest thing in the catalog so the tracking says delivered, then post a glowing five-star review under your name.

1:42

The box on your porch is the receipt that makes the fake review look real.

1:47

You're not the customer, you're the alibi.

1:49

The item is cheap because it's a prop.

1:52

Seeds and baby wipes are classic because they ship for pennies.

1:57

The ring with a certificate is a flourish.

2:01

It looks like a gift, so you'll keep it and never question it.

2:05

And the new wrinkle, which is why this earns a full episode now.

2:10

The card inside with a QR code.

2:12

Scan to see who sent this.

2:14

Scan to register your jewelry.

2:16

Scan to arrange a return.

2:19

The Postal Inspection Service has flagged this specifically.

2:23

The package is the bait and the code is the hook, leading to a page that asks for personal information or worse.

2:30

If you heard our QR episode two weeks ago, you already know the rule.

2:35

A QR code is a link you can't read, and an unsolicited one never gets scanned.

2:41

A code that arrived in a box you didn't order is the purest example on earth.