Unexpected packages and QR phishing

Brushing Scam

An unexpected package addressed to you can be more than a shipping mistake. In a brushing scam, someone may use your name or address to create fake reviews, and a QR code inside the package can lead to a phishing site.

Check it now More scam guides

You never ordered it

The package arrives in your name even though you did not buy the item.

Cheap or random contents

Reports often involve low-cost items sent simply to create a delivery record.

QR code in the package

A note may invite you to scan a code to identify the sender, claim a reward, or arrange a return.

Why brushing scams matter

A seller may use a delivered package to create the appearance of a real transaction and then post a fake review using your identity or name. The package can also indicate that your personal information is circulating where it should not be.

A QR code adds another risk. Scanning it can take you to a phishing page that asks for login credentials, payment details, or personal information. Treat the code like any unexpected link.

Common warning signs

A package addressed to you arrives with no matching order.
The item is cheap, random, or unrelated to anything you purchased.
A note asks you to scan a QR code to find the sender, return the item, or claim something.
The QR destination asks for passwords, card details, or account verification.
Your marketplace or shopping account shows activity you do not recognize.

Safer way to respond

Check your shopping accounts directly instead of scanning the package QR code.

Change passwords and review account activity if you suspect an account may have been accessed.

If you want to inspect the QR destination, read the code without opening the link and then verify the domain before visiting it.

What SafeOrScamCheck can and cannot tell you

SafeOrScamCheck includes a QR mode that can read the destination without immediately opening it, then analyze the URL for warning signals. It cannot determine who physically mailed the package or whether your identity data has been misused elsewhere.

Official guidance

The FTC warned in August 2026 that unexpected packages can be part of brushing scams and that QR codes included with them may lead to phishing websites. Read the official guidance.

Frequently asked questions

Do I have to pay for an unordered package?

FTC guidance says you do not have to pay for unordered merchandise. The bigger concern is why the package arrived and whether your information was misused.

Should I scan a QR code inside an unexpected package?

Avoid opening an unexpected QR destination. If you inspect it, read the destination first and verify the domain independently.

Does a brushing package mean my account was hacked?

Not necessarily, but it can indicate that personal information is being used. Review shopping accounts and passwords for signs of compromise.

Related checks and guides

SafeOrScamCheck provides warning-signal analysis, not proof that a message, link, website or offer is safe or fraudulent. Verify important identities, payment details and claims independently before acting.