Skip to main content

What’s in the Box? Brushing Scams and How to Protect Yourself

An Amazon package sits on a doorstep, representing the unexpected deliveries used in brushing scams that exploit personal data.

Home » Blog » What’s in the Box? Brushing Scams and How to Protect Yourself

You get a package delivered to your door. Your name’s on it, your address is correct, but… you don’t remember ordering anything. Could it be a gift? Maybe it’s something you forgot about?

You open it. Inside is a random item and a note asking you to scan a QR code to find out who sent it.

Here’s the catch—you might’ve just stepped into a brushing scam.

What’s a Brushing Scam?

These scams aren’t about the freebie. They’re about your personal data and how fraudsters can use it.

According to the Canadian Anti-Fraud Centre, brushing scams happen in a few ways. One involves fake reviews, and the other can lead to full-on identity theft.

Fake Reviews Using Your Info

A shady online seller gets your name and address from a leaked database. They ship you low-cost merchandise. Then, they post glowing five-star reviews using your info—posing as a “verified buyer.” Because you technically received the item, the fake review seems legit.

This boosts their product rankings, earns consumer trust, and boosts their sales. The term “brushing” comes from brushing up their numbers and visibility.

If there’s an invoice inside the package, don’t bite. You’re not required to pay for unsolicited goods. Toss the item if you don’t want it, and report sketchy sellers to the platform it came from.

Identity Theft in Disguise

Some scammers go even further. They include a QR code instead of a name, saying, “Scan to see who sent this!” Doing that could send you to a phishing site or install malware on your device. They might ask you to enter a credit card number or login info.

Once they’ve got that, they’ve got access. And your identity is now a target.

How Fake Reviews Hurt Everyone

A 2023 study by The Transparency Company showed:

  • 98% of consumers use reviews to help make purchases
  • 14% of those reviews are likely fake
  • AI-generated reviews are increasing by 80% each month

This is big business for fraudsters, and it chips away at trust in online shopping.

Real-world example: a New York orthopedic surgeon was fined $100,000 for manipulating his online reviews. He even offered copay refunds to patients in exchange for deleting negative ones.

Spotting Fake Reviews: Tips from the Better Business Bureau

  • Profiles with no photos or weird usernames? Red flag.
  • Only five-star reviews with no cons? Hmm.
  • Watch out for perfect grammar or overuse of dramatic language. Real people don’t write like that.
  • “Scene setting” that doesn’t relate to the product? Likely fake.
  • Reviews posted in bulk over a short time? It could be a brushing campaign.

If it seems too good to be true, trust your gut.

What To Do If You Get a Surprise Package

  • Don’t scan QR codes. Legit gift notes will say who it’s from. No mystery needed.
  • Change your passwords—especially if you accidentally entered info after scanning.
  • Enable two-factor authentication on your accounts.
  • Check your credit report at Equifax or TransUnion for any weird activity.
  • If you have one, report the incident to Amazon (or the retailer), the CAFC, or your identity theft protection provider.
  • Don’t engage with the sender.
  • Update your software and antimalware protection on all devices.
  • Stay alert to phishing attempts via email or text.
  • If identity theft happens, report it to the CAFC, credit bureaus, and police.

Why Personal Cyber Liability Insurance Matters

In today’s world, brushing scams are just one piece of a much bigger problem—cybercrime. At Wedgwood Insurance, we offer personal cyber liability insurance to help protect you from threats like identity theft, financial fraud, and data breaches.

If your personal information is compromised, personal cyber coverage can help with:

  • Recovering lost funds
  • Restoring your identity
  • Hiring professionals to clean up your digital footprint
  • Legal fees or damages tied to cyberattacks or fraud

It’s not just for businesses anymore. Cybercrime is personal now.

So whether you’re dealing with a brushing scam, a hacked email, or a phishing attack, having that extra layer of protection could save you time, stress, and money.

Trust Your Instincts

Fraudsters succeed when you’re caught off guard. Take a breath, stay calm, and think before you act. If something doesn’t feel right, it probably isn’t.

And if you’re unsure how to protect your personal data better or want to learn more about personal cyber liability coverage, talk to one of our Advisors. We’re here to help you stay informed and protected in a digital world.

You got this. And we’ve got your back.

About Wedgwood Insurance

Wedgwood Insurance has offices in St. John’s & Corner Brook and is Newfoundland & Labrador’s largest independent insurance broker. We provide straightforward home, auto & business insurance advice.

With over 300 Google My Business reviews, experience the Wedgwood difference with expert advice from our dedicated team. We ensure that every client has the coverage that best suits their needs through upfront complimentary consultations and midterm reviews.

Contact Us

  • This field is for validation purposes and should be left unchanged.

Author Jamie Ross

Jamie Ross leads the Marketing and Communications team at Wedgwood Insurance, renowned as one of Atlantic Canada’s premier independent insurance brokers. Bringing a wealth of experience amassed over many years at some of Canada's most esteemed advertising agencies, Jamie transitioned to the insurance industry in 2017. This pivotal move has marked a period of significant professional growth and contribution to the field. A native Nova Scotian, Jamie has been a resident of St. John's, NL, since 2011, where he has become an integral part of the local community. Learn more about Jamie.

More posts by Jamie Ross
Skip to content