Got a Package You Never Ordered? The FTC Says It Could Be a Sign Someone Has Your Information

An unexpected package could signal a brushing scam, especially if someone used your name and address to create fake purchases or reviews. The FTC recommends securing shopping accounts, checking credit reports and avoiding suspicious QR codes – Shutterstock

An unexpected package usually brings one of two reactions: excitement that something fun arrived or confusion over why anyone sent a box of baby wipes, toothpaste, or random seeds. But the Federal Trade Commission now has a less cheerful explanation for those mystery deliveries: someone may have your personal information. The FTC warns that an unsolicited package can signal a “brushing” scam, in which a seller uses someone’s name and address to make fake purchases and reviews look legitimate.

A strange box deserves more attention than a shrug and a trip to the junk drawer, especially if the package includes a QR code, asks for a review, or seems connected to an account that nobody in the household recognizes.