An unexpected parcel can look like a harmless free gift. It may instead be part of a brushing scam, in which a seller sends an unsolicited item to create a false impression of a genuine sale or review.
The right response is calm verification, not panic. You do not have to assume your bank account has been emptied, but you should check whether someone has used your details and avoid scanning any mysterious QR code inside the box.
What a brushing scam is
A brushing scheme may involve a cheap item sent to an address the recipient did not use for an order. The sender then tries to connect a delivery record to a fabricated review or marketplace activity.
A real parcel is not proof that the recipient bought anything. It can also be a legitimate gift, a misdelivery or a fulfilment error. Begin by checking household orders before assuming fraud.
Do not scan the mystery QR code
Some unsolicited parcels include a printed QR code promising to identify the sender or explain a return. That code may point to a website designed to collect login or payment details.
Use the retailer’s app or type the official website address yourself. Do not enter a password, payment card number or identity document simply to learn why an item arrived. Read our related account-security guide for a practical next step.
Check your shopping accounts
Review recent orders, saved addresses, payment methods and account security notifications. Look for purchases you do not recognise and contact the marketplace through its official help channels. Another useful precaution appears in this companion article.
If you find signs of account access you cannot explain, change the account password, review active sessions and strengthen sign-in security. A passkey or multifactor authentication can make future takeover harder.
Check cards and statements
An unsolicited item does not necessarily mean money was taken. Still, reviewing card activity is a sensible precaution, especially if the package names a marketplace you use regularly.
Contact your bank through a trusted number if you see a suspicious transaction. Do not call a telephone number printed on a suspicious insert without independently checking it. For a different perspective on protecting important messages, see this related article from our partner site.
Report rather than engage
Photograph the shipping label and contents if needed for a report, but avoid posting your full address publicly. Report the parcel to the marketplace and the appropriate consumer-protection authority.
The Federal Trade Commission explains that unsolicited merchandise does not create an obligation to pay. That is different from receiving an item meant for a neighbour, which should be handled as a delivery mistake. The Federal Trade Commission’s consumer guidance explains what to watch for.
Make a family rule
Agree that nobody in the household will scan a QR code from an unexpected package or follow a payment request without checking the original retailer account.
This rule is particularly useful during busy gift-buying weeks when several people may be expecting deliveries. A shared order list can prevent confusion without exposing passwords.
Distinguish a surprise gift from a suspicious delivery
Ask household members whether they ordered the item or know someone who might have sent it. A surprise birthday or holiday present may arrive without the sender’s name on the outside. Look at the packing slip without following unfamiliar links.
If the parcel has someone else’s name, treat it as a misdelivery and contact the carrier. Do not assume every unexpected package is part of a scheme. A careful check prevents unnecessary account changes and avoids disrupting a legitimate gift.
Check whether your identity was used elsewhere
A single unsolicited parcel is not proof of identity theft. Nevertheless, it is worth checking whether your email address, phone number or shopping account shows unfamiliar changes. Look for new saved addresses and unrecognised order confirmations.
If the account appears compromised, sign out of unfamiliar sessions and update recovery options. Review your credit report when you have a reason to suspect identity misuse. Keep the response proportionate to what you actually find.
Keep a simple evidence record
Save the shipping label, order number if present and a photograph of the contents. Do not post the label online because it may expose your home address and contact information. A short note of when the parcel arrived is enough for most reports.
When contacting a marketplace, use its official support channel. Explain that you did not order the item and ask whether the shipment is associated with your account. Avoid providing more personal information than the service genuinely needs.
What about keeping or returning the item?
US consumer protections generally do not require payment for merchandise you did not order. That does not make it wise to use an unknown cosmetic, supplement, electrical item or food product from an unidentified sender.
If the parcel was addressed to somebody else, that is a different situation: contact the delivery company or intended recipient as appropriate. For your own unsolicited item, follow official marketplace advice and keep safety in mind.
Protect older relatives and busy households
A scammer may count on someone scanning a code out of curiosity or believing a printed card that claims a return fee is required. Explain the risk without making the person feel foolish. Show them how to open the official shopping app instead.
In a shared home, decide who checks unexpected packages and where order confirmations are kept. The goal is to make independent verification easy, not to create an elaborate security ritual every time a box arrives.
A practical ten-minute checklist
First, check recent household orders. Second, inspect the label and photograph the parcel. Third, verify the marketplace through its official app. Fourth, review account activity if the delivery is unexplained. Fifth, report suspicious details without using the parcel’s QR code.
If everything checks out and no accounts show suspicious activity, there may be nothing more to do. If you uncover unauthorised transactions or identity misuse, contact the relevant financial institution and use official fraud-reporting channels promptly.
