This Latest 'Brushing' Scam Tempts You With Free Items. Don't Fall for It

One of the latest package scams, called brushing, involves an unexpected package showing up at your door. When you open the box, there's a QR code (tip: never scan an unfamiliar QR code) that tries to get you to share your sensitive information.

While the holiday season may be behind us, that doesn't mean you're safe from gift and package-related scams. Whether it's so-called "porch pirates" stealing deliveries off your doorstep or fake delivery texts trying to get you to share your credit card information, there are plenty of delivery-related scams and schemes to watch out for throughout the year.

Victims of a scam can wind up revealing their personal information -- like credit card or Social Security numbers -- having their identity stolen or all of the above.

What is 'brushing'?

Criminals target victims by having seemingly free gifts delivered to their doorstep. 

Picture this: You open your door to one or more new packages you didn't expect, yet they're addressed to you. You open it to see what's inside and find items you didn't order. 

The Better Business Bureau has seen "brushing" packages arrive with random items like hand warmers, flashlights, Bluetooth speakers and computer vacuum cleaners. Generally speaking, scammers send lightweight items so they're inexpensive to ship.

The free items won't come with an explanation but may include a QR code for recipients to scan. When scanned, the codes will lead them to a legitimate-looking website that aims to trick people into revealing sensitive information like their full name, credit card numbers and SSN, among others.

In other scenarios, third-party sellers send packages to victims, who are then "confirmed" as recipients of the product. Sellers do this so they can write glowing reviews for the purchase under your name to boost their product ratings or sales.

Even though you may have received some free stuff, the US Postal Service cautions that if you're a victim of a brushing scam, your personal information has been compromised. 

What to do if an unrecognized package shows up by your door

If a package you didn't order appears on your doorstep, it's not your lucky day. At the very least, it means a criminal enterprise may have your full name and address, and considers you a potential target for future scams.

Here are some steps you can take:

• Don't pay: Avoid scanning any QR codes in the package and don't agree to pay for items through any other means. 
• Notify authorities: If the package contains liquids, seeds or other suspicious materials, the Postal Service says you should notify local authorities. If you are wary of the contents, you can follow the Postal Service procedure for suspicious mail.
• Notify the retailer: If packages are sent through reputable third-party companies like Amazon or eBay, head to the company's website and file a fraud report.
• Return to sender: You can also repackage the items and ship them back to the sender (if a return address is provided). You can also mark the package with "RETURN TO SENDER" and the Postal Service will take it back at no charge.
• Keep or throw away the items: If you like the items and can use them, no laws prevent you from keeping the packages and their contents. You can also discard the items or give them to family members or friends.

The Postal Service adds that you should update your account passwords, especially if you think some of your online accounts have been compromised. 

You should also monitor your financial accounts and credit reports closely to watch for signs of fraud, including getting charged for items you didn't purchase or seeing new accounts opened in your name. You can check your credit reports for free with all three credit bureaus with the website AnnualCreditReport.com.

Scams to watch out for throughout the year

Although you may be more aware during the holiday season, there are scams to watch out for whatever the time of year. Here are a couple to keep an eye out for.

Gift card scams

A range of gift card scams can leave you with empty cards. Criminals can place a fake barcode on the back of purchased gift cards that sends money directly to them instead of loading the card. They might also steal the PIN code and account information off the card so they can drain it quickly after the card's been activated.

In either case, you should check gift cards for tampering before you buy them and always save your receipts. If you received a gift card for the holidays, your best bet is to spend the balance down right away.

Charity scams

The Federal Trade Commission warns that charity fraud can be a problem throughout the year. These scams typically come from third-party individuals or groups you've never heard of who want money quickly. They often post on social media but only mention vague details about the charity. They may also lie and say you already pledged money to get you to comply.

To avoid becoming a victim of a charity scam, you should verify the authenticity of any charities you donate to. Also, don't let anyone pressure you into donating if you don't want to.

Tips to avoid becoming a victim

The FTC says many scammers pretend to be reputable companies and may try to create a sense of urgency to get you to act quickly. They use various tactics to get you to divulge sensitive information or pay for something you shouldn't, although scammers may have other goals in mind as well. 

Here are some tips to help you avoid becoming a victim of some common types of fraud:

• Be aware of payments scammers typically ask for: The FTC says knowing the types of payments scammers ask for can tip you off to a scam. Many ask you to pay them in ways that cannot be tracked, such as cryptocurrency, gift cards, payment apps or money transfer services.
• Be wary of unsolicited messages: If you receive messages asking for information or payment out of the blue, you should never respond. This includes texts or emails about packages you didn't order. If the message is seemingly from a legit source like a bank or the Postal Service, don't click on the link and instead go to the official website for information.
• Block unwanted calls and texts: You can always block spammy texts and phone calls so you no longer receive communication from that number.
• Stop and think before you act: If you feel skeptical about a communication and you're wondering if it's a scam, reach out to a trusted friend or family member to ask their advice. 

The FTC also says you should report scams and other suspicious activity to them at ReportFraud.ftc.gov.