Think Twice Before Accepting That "Free Gift": The Hidden Dangers of Brushing Scams

In the age of e-commerce, where online shopping has become the norm, finding a package on your doorstep isn't anything strange or unexpected. But what if inside that package that was addressed to you are some random items you never ordered? 

Before you get excited about the free gift, you need to take a step back because you might be a target for a brushing scam. It may seem harmless at first, but the consequences can go far beyond an unwanted item cluttering your home.

Understanding Brushing Scams

So, what exactly is a brushing scam? It's a deceptive tactic used by some online sellers to artificially inflate their product ratings and sales. They get a hold of your personal information, often through data breaches or other means, and then send you unsolicited packages. 

This allows them to pose as a verified customer and write glowing reviews, misleading other shoppers and boosting their product's visibility.

The unsolicited package is a clear sign that your personal information has been compromised. Scammers don't send out free stuff out of the kindness of their hearts; they have an ulterior motive. And that motive can have far-reaching consequences for your privacy, security, and even your financial well-being.

From Data Breach to Fake Review: The Brushing Scam Cycle

Brushing scams might seem like a random act of kindness, but they're actually a carefully calculated scheme designed to manipulate online marketplaces and trick consumers. To understand how these scams work, you also need to understand how a typical brushing scam develops from start to finish.

Step 1 - The Data Harvest

It all starts with your personal information. Scammers get a hold of your name, address, and sometimes even your purchase history from various sources, including data breaches, online quizzes, or even public records. This information is often bought and sold on the dark web, making it readily available to scammers and fraudsters who are looking to abuse it.

Step 2 - The Fake Account

Once they have your personal information, the scammer creates a fake account on a popular e-commerce platform like Amazon or eBay. They might use a generic name or a slightly altered version of your name to avoid suspicion.

Step 3 - The Ghost Purchase

Using their fake account, the scammer places an order for a low-cost item from their own store or a store they are affiliated with. They use your name and address as the shipping information, making sure that the package arrives at your doorstep.

Step 4 - The Fake Review

Once the package is delivered, the e-commerce platform registers the purchase as a verified transaction. The scammer, now posing as a legitimate customer, can then write a glowing review of the product, praising its quality, value, or other attributes. These fake reviews boost the product's visibility and ratings, making it more appealing to genuine customers.

Step 5 - The Profit Motive

The scammer's goal here is to increase sales and profits by manipulating the perception of their products. The cost of sending out low-cost items is a small price to pay for the potential gains from increased sales and positive reviews.

The Domino Effect: How a "Free Gift" Can Lead to Financial Disaster

Brushing scams are often just the tip of the iceberg. The information scammers get a hold on to send you that unsolicited package such as your name, address, and potentially even your purchasing history can be used for more malicious purposes.

Just some of the domino effects you can expect after a brushing scam include:

• Identity theft: Armed with your info, scammers can try to open fraudulent accounts in your name, apply for credit cards, or even file taxes fraudulently. This can lead to financial loss, damage to your credit score, and a long and stressful recovery process.

• Account takeovers: Scammers might use your information to try to gain access to your online accounts, such as your email, banking, or social media profiles. They can try to reset your passwords or use social engineering tactics to trick you into giving up your login credentials.

• Phishing attacks: Brushing scams can be a precursor to more targeted phishing attacks. Scammers might send you personalized emails or messages that appear to be from legitimate companies or organizations, trying to trick you into revealing sensitive information or downloading malware.

• Advanced scams: The information gathered through brushing can be used to make other scams more convincing. For example, scammers might use your name and address to create fake invoices or impersonate someone you know, making their schemes more believable and increasing the likelihood of you falling victim.

• Data breaches and the dark web: Your information might be sold on the dark web, where it can be purchased by other cybercriminals and used for a variety of malicious purposes. This exposes you to a wider range of threats, from identity theft and financial fraud to cyberstalking and harassment.

Don't Just Brush It Aside: What to Do After a Brushing Scam

Receiving an unexpected package might seem like a harmless surprise, but if you suspect it's part of a brushing scam, you shouldn't just brush it aside. Instead, you need to minimize the risk of further complications.

Change Your Passwords

The first thing you need to do right off the bat is change the passwords for your online accounts, especially those related to e-commerce platforms, banking, and other sensitive information. Make sure to always use strong, unique passwords that are difficult to guess.

Monitor Your Accounts

Keep a close eye on your bank accounts, credit card statements, and credit reports for any suspicious activity. Look for any unauthorized transactions, new accounts opened in your name, or changes to your personal information.

Watch out for Phishing Attempts

Scammers might use the information they obtained through the brushing scam to launch phishing attacks. That's why you need to be especially careful and watch out for any emails, messages, or phone calls that look suspicious or ask for personal information.

Set up a Fraud Alert

If you're concerned about the potential for identity theft, consider placing a fraud alert on your credit report. This will notify creditors to take extra steps to verify your identity before opening any new accounts in your name.

Conclusion

Brushing scams are more than just a nuisance; they are a red flag that your data might be compromised, potentially leading to more serious consequences like identity theft and financial fraud. So while a fake review might not harm you, the domino effect that usually happens after a brushing scam certainly will.  

However, If you do fall victim to a brushing scam or any other type of fraud, don't hesitate to reach out to Payback. We specialize in helping people who've been scammed by investigating fraud and equipping our clients with the tools, knowledge, and expertise they need to get their money back.