Imagine opening your mailbox and finding an envelope addressed to you. It looks legitimate. It has proper postage and even a tracking number. You open it—and there’s absolutely nothing inside. Or perhaps a small package arrives that you never ordered. Inside is either a worthless trinket or nothing at all. Most people would simply throw it away.
Unfortunately, that may be exactly what scammers are hoping you’ll do.
What Is Happening?
Law enforcement agencies and the U.S. Postal Inspection Service have warned consumers about a growing fraud known as a “brushing scam.” In some newer variations, criminals are sending completely empty envelopes or empty packages to unsuspecting victims.
These mailings serve several purposes.
First, they create a legitimate postal tracking number showing that something was successfully delivered to a real address. Scammers can then use that delivery record to falsely claim products were shipped or delivered.
Second, some dishonest online sellers use these deliveries to create fake “verified purchases” so they can post glowing reviews of their own products under someone else’s name. This artificially boosts their ratings and increases sales.
Third—and perhaps most concerning—the mailing may be designed simply to verify that your name and mailing address are valid. Once confirmed, that information may be combined with data obtained from previous data breaches and used in future identity theft or phishing schemes.
The New Twist
Some envelopes or packages now contain a QR code, a website address, or a phone number asking you to “scan here to identify the sender” or “claim your prize.”
Don’t do it.
Scanning an unknown QR code may send you to a fake website designed to steal passwords, banking information, or other personal information. In some cases, it can even lead to malware being installed on your smartphone.
What Should You Do?
If you receive an empty envelope or an unexpected package:
- Do not scan any QR code.
- Do not call telephone numbers listed inside.
- Do not click on any website links.
- Do not provide personal information to anyone claiming to be the sender.
- Review your online shopping accounts for suspicious activity.
- Change passwords if you suspect any account has been compromised.
- Monitor your bank and credit card statements for unauthorized transactions.
- Consider reporting the incident to the U.S. Postal Inspection Service if the mailing appears suspicious.
A Good Rule to Remember
Scammers succeed because they rely on curiosity.
When something unexpected arrives in the mail, resist the temptation to investigate by scanning a code or contacting the sender. Legitimate businesses rarely ask customers to verify their identity through an unsolicited empty envelope.
As technology changes, scams continue to evolve. A healthy dose of skepticism remains one of the best forms of identity theft protection.
Remember: If you didn’t order it, don’t interact with it. Curiosity can be expensive.
Be Educated! Be Proactive!
Recent Comments