The IFCU Blog

Beware of the Brushing Scam: What It Is and How to Stay Safe

In the age of online shopping, it’s more convenient than ever to receive packages delivered straight to your doorstep. However, not all packages are welcome, especially when they’re part of a deceptive practice known as the "brushing scam." At Industrial Federal Credit Union, your security is our top priority, and we’re here to help you understand this scam and protect yourself from potential risks.

What Is the Brushing Scam?

The brushing scam involves receiving unsolicited packages from online retailers or third-party sellers. These packages often contain inexpensive or random items you didn’t order, such as socks, phone cases, or small gadgets. While it might seem harmless to receive free items, there’s more to this scam than meets the eye.

In a brushing scam, sellers use your address to create fake orders and post positive reviews under your name. This deceitful practice boosts their ratings and makes their products appear more popular, giving them a competitive edge in online marketplaces. Unfortunately, your personal information being used without your consent is a red flag that your data might have been compromised. The gift will have the recipient’s address but not include the sender's information or be from a known retailer. When the recipient opens the package to see what it is and possibly who sent it, there is a QR code to scan to find out who sent the gift.

The Danger of QR Codes in Packages

These QR codes might claim to help you find out who sent the package or provide additional information. However, scanning the QR code can be extremely dangerous. Once scanned, the QR code can give scammers access to all the information on your phone, including personal and financial details. This access can lead to:

• Identity Theft: Scammers can use your personal data for malicious purposes.

• Bank Account Compromise: With access to your financial apps and details, scammers can drain your bank accounts.

• Full Device Takeover: They may exploit your phone to access sensitive information, photos, or even passwords.

It’s critical to avoid scanning QR codes from unknown sources to prevent falling victim to this tactic.

How to Protect Yourself

Here are steps you can take to safeguard your personal information and avoid becoming a victim of the brushing scam:

1. Don’t Engage: If you receive a package you didn’t order, don’t contact the sender or attempt to return the item. This could signal to scammers that your address is valid and active.

2. Avoid Scanning QR Codes: Never scan QR codes from unknown packages. Treat these codes with caution, as they can lead to serious data breaches.

3. Monitor Your Accounts: Regularly check your online shopping and financial accounts for unauthorized activity. Look out for unfamiliar charges or accounts you didn’t create.

4. Update Passwords: Use strong, unique passwords for your accounts, and update them regularly. Consider enabling two-factor authentication for added security.

5. Report the Incident: Notify the retailer or platform (e.g., Amazon) where the package originated, as they may have protocols to address brushing scams. Additionally, you can report the issue to the Federal Trade Commission (FTC).

6. Check Your Credit: Keep an eye on your credit report for any unauthorized accounts or suspicious activity. Industrial Federal Credit Union offers a free credit score tool to help monitor your credit report and much more inside our Online and Mobile Banking.

7. Secure Your Data: Be cautious about sharing personal information online. Limit the amount of data you provide to retailers and other platforms.

Stay Informed and Vigilant

As scams like brushing become more sophisticated, staying informed is your best defense. At Industrial Federal Credit Union, we’re here to support you with resources and guidance to keep your financial future secure. If you suspect fraudulent activity on your account or have concerns about your personal information, don’t hesitate to contact us.

By staying vigilant and taking proactive steps, you can protect yourself from the risks associated with the brushing scam and other forms of fraud. Together, we can build a safer and more secure community for everyone.