📦 USPS Issues Urgent Warning About ‘Brushing’ Scam: Why That Mystery Package Could Mean Your Data’s Been Compromised
If you’ve ever opened your front door to find a package you didn’t order — maybe a pair of socks, a kitchen gadget, or a random trinket — don’t chalk it up to good luck. According to the U.S. Postal Service (USPS), it could be a sign that your personal information has been stolen and is being exploited in a growing cybercrime known as a “brushing” scam.
This seemingly harmless delivery is part of a much larger, more insidious scheme that could put your identity and financial security at risk. Here’s what you need to know about brushing scams, how they work, and what to do if you’ve been targeted.
🕵️ What Is a Brushing Scam?
A brushing scam is a deceptive tactic used by third-party online sellers to boost their product ratings and visibility on e-commerce platforms. Here’s how it works:
- Scammers obtain your name and address — often from leaked or purchased data.
- They ship you a low-cost item you didn’t order.
- Then, using your identity, they post a fake “verified purchase” review to boost their product’s credibility.
“These scams occur when a customer receives unsolicited packages containing low-cost items like household goods,” explained U.S. Postal Inspector Kelly McNulty in an interview with KOB 4 News. “These packages are often sent by online retailers or third parties who use compromised personal information to create fake transactions.”
The goal? To game the system and make their products appear more popular and trustworthy — all at your expense.
🔐 Why It’s a Big Deal
At first glance, receiving a free item might seem like a harmless fluke. But experts warn that it’s a red flag that your personal data — including your name, home address, phone number, and possibly even payment information — has been compromised.
“This is about more than just a package,” McNulty emphasized. “Treat your personal information like cash.”
Brushing scams are often the tip of the iceberg. If your data has been used for fake reviews, it could also be used for:
- Identity theft
- Credit card fraud
- Phishing scams
- Account takeovers
- Bypassing two-factor authentication
In short, if someone has enough information to send you a package, they may have enough to do much worse.
📦 What to Do If You Receive a Mystery Package
If a package you didn’t order shows up at your door, don’t panic — but don’t ignore it either. Here’s what the USPS and cybersecurity experts recommend:
- Report It: Visit USPIS.gov and file a report with the U.S. Postal Inspection Service. This helps investigators track down the source and prevent future scams.
- Check Your Accounts: Review your bank, credit card, and online shopping accounts for any suspicious activity. Also, request a free credit report from Equifax, Experian, or TransUnion.
- Change Your Passwords: Even if you don’t see fraud, update your passwords — especially for email, Amazon, banking, and any accounts tied to personal or financial data.
- Use a Password Manager: These tools generate and store strong, unique passwords for each account, making it harder for hackers to gain access.
- Don’t Engage: You’re not obligated to return or review the item. Doing so may confirm your address to scammers and lead to more unwanted deliveries.
- Avoid QR Codes: If the package includes a QR code, don’t scan it. These can lead to malicious websites that install malware or steal your data.
🛡️ Project Safe Delivery: USPS’s Broader Fight Against Fraud
The brushing scam warning is part of the USPS’s larger initiative called “Project Safe Delivery,” launched in 2023 to combat mail-related crimes. Since its inception, the program has led to:
- Over 2,800 arrests
- More than 1,200 arrests in 2025 alone
- Crackdowns on mail theft and attacks on postal workers
Now, the USPS is expanding its focus to include scams that target consumers directly. As fraud tactics become more sophisticated and personalized, public awareness is key to prevention.
💸 Another Scam to Watch: Counterfeit Postage
While brushing scams are making headlines, USPS is also warning about a surge in counterfeit postage. These fake stamps often appear on social media or discount websites offering steep deals — sometimes 40% to 50% off.
“If you see large discounts on stamps, it’s probably too good to be true,” McNulty said. Using counterfeit postage can result in your mail being rejected or even legal penalties.
To stay safe, always purchase stamps directly from USPS or authorized retailers.
🧠 Why Your Data Is So Valuable
In today’s digital economy, your personal information is a currency — and scammers are cashing in. Data breaches, phishing attacks, and shady data brokers have made it easier than ever for criminals to get their hands on your info.
Once they have it, they can:
- Open credit cards in your name
- File fraudulent tax returns
- Access your bank accounts
- Impersonate you online
- Sell your data on the dark web
That’s why experts stress the importance of treating your personal data with the same care you’d give your Social Security number or debit card.
🧭 Final Tips to Stay Safe
Here’s a quick checklist to help you protect yourself from brushing scams and other forms of identity theft:
✅ Never share personal information with unverified sources ✅ Use two-factor authentication on all major accounts ✅ Monitor your credit regularly ✅ Be skeptical of unsolicited packages or emails ✅ Educate family members, especially seniors, about common scams ✅ Report suspicious activity to the proper authorities
🧾 The Bottom Line
A free package might seem like a lucky surprise, but it could be a warning sign that your personal data is in the wrong hands. Brushing scams are more than just a nuisance — they’re a gateway to identity theft and financial fraud.
So the next time a mystery box lands on your doorstep, don’t just shrug it off. Take it seriously, report it, and take steps to secure your digital life.
As Inspector McNulty put it: “Think before you send it — and think twice when you receive it.”
and file a report with the U.S. Postal Inspection Service. This helps investigators track down the source and prevent future scams.
