?? Mystery Package on Your Doorstep? Don’t Fall for This Scam! ??

Can You Guess Which Generation is Most Susceptible to Scams?

It’s not Baby Boomers. While older generations are frequently targeted by scams, the age group most vulnerable to falling for them is actually 18- to 24-year-olds.

Surprising, right? Despite being tech-savvy and social media natives, younger adults are often caught off guard by scams that evolve as fast as technology itself.

In reality, we’re all potential targets. One such scam that’s been making waves lately is called "brushing."

What is Brushing?

Picture this: You come home to a package on your doorstep that you didn’t order. There’s no return address or any indication of who sent it, just your name and address prominently displayed. Curious, you might be tempted to figure out who it’s from, but be careful—this could be the start of a scam called brushing.

Brushing scams work by using your personal information, such as your name and address, to send unsolicited products. Scammers use this as a way to create fake verified reviews for online products, boosting their sales numbers. While getting a free item sounds harmless, this scam is far from a victimless crime.

The latest evolution of brushing scams involves adding QR codes to packages, making it easier for scammers to steal personal information if you scan the code. So, what should you do if you receive an unexpected package? Let’s break it down.

How to Protect Yourself from Brushing Scams

1. Don’t Scan the QR Code The safest rule of thumb is to avoid scanning any QR code that you aren’t expecting. Scammers can easily create malicious websites through these codes, and by scanning them, you could unknowingly hand over personal details—like bank or account information—stored on your phone. When in doubt, throw it out.
2. Verify with Friends or Family Before you jump to conclusions, check with family and friends to make sure the package wasn’t a delayed gift. Misdelivered packages happen more often than you think, especially during holidays or birthdays. If no one claims it, proceed with caution.
3. Contact the Retailer Many companies, including Amazon, have established protocols for handling brushing scams. If the package was sent by a major online retailer, contact their customer service to report the unsolicited delivery. They may also recommend additional steps to secure your account.
4. Change Your Passwords If you’re a brushing target, there’s a good chance the scammers got hold of your personal information from a data breach or online leak. Immediately change your passwords—especially for important accounts like banking, email, and social media. Use strong, unique passwords for each account, and consider using a password manager for added security.
5. Monitor Your Accounts Stay vigilant after you receive a brushing package. Monitor your financial accounts for unusual activity and keep an eye on any emails or alerts related to your online shopping profiles. Scammers may attempt to use your details for other, more serious crimes like identity theft.
6. Report It Finally, report the incident to your local authorities or consumer protection agencies, such as the Federal Trade Commission (FTC). While the package itself may seem harmless, reporting brushing scams can help prevent further misuse of your information.

Stay Safe in the Evolving Digital Landscape

Brushing scams highlight just how quickly online threats evolve. While it might seem like a harmless surprise, unsolicited packages are often just the tip of the iceberg. By staying informed and following these precautions, you can protect yourself and your personal information from falling into the wrong hands.

And remember—if a package or offer seems too good to be true, it probably is!

Have you ever fell victim to a scam? How did you protect yourself?

Andy Wang , Managing Partner at Runnymede Capital Management, Inc.