What Is a Brushing Scam?

Header

Author: Trend Micro

October 4, 2021

This article is from Trend Micro.

Ever wondered if you can trust online reviews on shopping websites? If you’ve done even a little bit of shopping on sites such as Amazon, you’ve almost certainly come across some reviews that seem too good to be true and questioned their legitimacy. And unfortunately, many of the reviews posted online nowadays are not legitimate — and it’s largely due to brushing scams.

What is brushing scam?

A brushing scam (often called an Amazon brushing scam) is used by online sellers to artificially inflate the number of positive reviews they have. Here’s how they work:

1. A person receives a package that they did not order. It is addressed to them, but there is most likely no return address.

2. The person opens the package and either chooses to keep the contents or throw it away. The person can’t return the package because of the lack of a return address.

3. The sender of the package posts a fake review on their online store, pretending to be the person they sent the package to.

The sender of the package does this to make it seem as though there was a verified sale of one of their products. The review they will write of their product will be glowing, and to prospective buyers, it will seem as though the product is excellent when in actual fact, nobody ever legitimately purchased it. The product will most likely be of very little value and cheap to ship, so the sender can afford to pull this tactic off many times and build up a large collection of glittering (but fake) reviews.

Why are brushing scams bad?

On the face of it, brushing scams may seem harmless. You might think “the person didn’t pay for the package, so what’s the problem?”.

One of the problems is the fact that the personal information of the package receiver is almost certainly compromised. Fraudulent online sellers most often obtain people’s names, addresses, and other personal information illegally — often from underground online websites or on the dark web. They will almost certainly use this information to commit other crimes and scams in the future.

Another issue is the fact that due to the seller’s online store having lots of positive reviews, other people will be prompted into making legitimate purchases of what are most likely poor-quality items.

How to protect yourself from brushing scams

Received an unwanted package in the mail? Here’s what to do about it:

1. If you want it, you can keep it. In the US, by law, you are entitled to keep unsolicited merchandise without needing to pay for it.

2. If you’re contacted by the seller and asked to pay for the goods, don’t. Don’t fall for any tricks or intimidation tactics they may use. If they provide you with a pre-paid return label, you can send back the package if you wish.

3. If it is clear which retailer the goods were sent from, contact them and file a fraud report and ask that any fake reviews posted under your name are removed.

4. If you’ve opened the package and you don’t want what’s inside, feel free to throw it away in the trash if it is safe to do so.

5. If the contents of the package are suspicious in any way, contact the relevant authority.

6. Change the passwords to your online accounts. In case more of your personal information has been compromised, it’s better to be safe than sorry.

We all need to do our part

Brushing scams are far more concerning than they first appear. If you are ever the target of a brushing scam, make sure to follow the tips outlined above to protect yourself and others. When everybody plays their part, brushing scams will soon become logistically and financially unviable for the scammers.

Report a Scam!

Have you fallen for a hoax, bought a fake product? Report the site and warn others!

Help & Info

Top Safety Picks

Your Go-To Tools for Online Safety
Disclaimer: Some of the links here are affiliate links. If you click them and make a purchase, we may earn a commission at no extra cost to you.

  1. ScamAdviser App - iOS : Your personal scam detector, on the go! Check website safety, report scams, and get instant alerts. Available on iOS
  2. ScamAdviser App - Android : Your personal scam detector, on the go! Check website safety, report scams, and get instant alerts. Available on Android.
  3. NordVPN : NordVPN keeps your connection private and secure whether you are at home, traveling, or streaming from another country. It protects your data, blocks unwanted ads and trackers, and helps you access your paid subscriptions anywhere. Try it Today!
  4. Incogni : Incogni automatically removes your personal data from data brokers that trade in personal information online, helping reduce scam and identity theft risks without the hassle of manual opt-outs. Reclaim your privacy now!

Popular Stories

As the influence of the internet rises, so does the prevalence of online scams. There are fraudsters making all kinds of claims to trap victims online - from fake investment opportunities to online stores - and the internet allows them to operate from any part of the world with anonymity. The ability to spot online scams is an important skill to have as the virtual world is increasingly becoming a part of every facet of our lives. The below tips will help you identify the signs which can indicate that a website could be a scam. Common Sense: Too Good To Be True When looking for goods online, a great deal can be very enticing. A Gucci bag or a new iPhone for half the price? Who wouldn’t want to grab such a deal? Scammers know this too and try to take advantage of the fact. If an online deal looks too good to be true, think twice and double-check things. The easiest way to do this is to simply check out the same product at competing websites (that you trust). If the difference in prices is huge, it might be better to double-check the rest of the website. Check Out the Social Media Links Social media is a core part of ecommerce businesses these days and consumers often expect online shops to have a social media presence. Scammers know this and often insert logos of social media sites on their websites. Scratching beneath the surface often reveals this fu

How do I recover my crypto after it’s stolen? What happens if your crypto wallet is compromised? Can stolen crypto be traced, and can police actually recover crypto in 2026? These are the questions most people ask within minutes of realizing their wallet has been drained. Crypto theft is fast, quiet, and unforgiving. By the time most victims notice something is wrong, the funds are already moving across the blockchain. Once seen as a problem for exchanges and whales, crypto theft now heavily affects everyday investors. Phishing links, fake support chats, wallet approval scams, SIM swaps, and malware attacks have become common. Knowing what recovery realistically looks like—and what it doesn’t—can prevent panic, bad decisions, and costly follow-up scams. In a Nutshell Crypto recovery is possible, but only in limited situations Blockchain transactions are irreversible, but stolen crypto can still be traced Speed and documentation matter more than optimism Police and exchanges play a bigger role than private recovery services Guaranteed recovery offers are almost always scams Is it Actually Possible to Recover Stolen Crypto? Yes, crypto recovery is possible, but only under specific conditions and rarely through direct action by the victim. Blockchain transactions are final by design. Once crypto is sent and confirmed, it cannot be reversed. There is no central authority, no chargeback process, and no technical “undo” button, even if the transaction was clearly fraudulent. This is where many people ask whether stolen crypto can be traced. In most cases, it can. Every transaction