A Brush with Online Fraud: What Are Brushing Scams and How Do I Stay Safe?

Why It Matters

Brushing scams erode confidence in online marketplaces and expose consumers to broader identity‑fraud risks, prompting platforms to tighten review verification.

Key Takeaways

• Scammers use unsolicited parcels to boost fake product reviews
• Receiving a package may indicate exposed personal data
• QR codes inside parcels can lead to phishing sites
• Enable MFA on banking and shopping accounts immediately
• Report brushing fraud to marketplaces; no return required

Pulse Analysis

The surge in e‑commerce has turned product reviews into a valuable currency, prompting sellers to seek any edge in visibility. While platforms tout secure checkout and buyer protection, the review ecosystem remains vulnerable to manipulation. Brushing scams capitalize on this by creating artificial purchase histories, flooding marketplaces with five‑star ratings that appear authentic. This not only misleads shoppers but also skews algorithmic rankings, giving dishonest sellers an unfair advantage and diluting the overall quality of consumer feedback.

At the heart of a brushing operation is a harvested database of names and addresses, often sourced from data‑broker sites or recent breaches. Fraudsters generate fake buyer accounts, purchase their own low‑cost goods, and ship them to unsuspecting recipients. The recipient’s address validates the transaction, allowing the scammer to post a glowing review under the guise of a genuine customer. Some packages even contain QR codes that redirect to phishing pages, turning a seemingly harmless parcel into a gateway for malware or credential theft. The cumulative effect is a layered threat: immediate privacy exposure followed by potential escalation into more serious identity fraud.

Defending against brushing requires a blend of personal vigilance and platform‑level safeguards. Consumers should limit publicly shared personal details, opt out of people‑finder services, and monitor credit reports for anomalies. Enabling multi‑factor authentication across banking, email, and shopping accounts adds a critical barrier against account takeover. Marketplaces are responding by tightening review verification, employing AI to detect anomalous shipping patterns, and offering streamlined reporting tools for victims. As awareness grows, the industry’s collective effort to protect data and preserve review integrity will be essential to sustaining trust in the digital marketplace.