There is a scam this season that targets victims who are usually gathering last-minute holiday packages arriving at their doorsteps. One advice: be careful about any that you didn't order or ones that don't have a return address and want you to scan a QR code: it could be a scam.
These so-called brushing scams have been around for a few years and there's a few varieties. They can range from a "victimless" crime to one that involves scanning a QR code to find out who the package is from.
That could lead consumers to a site tricking them to enter personal information, similar to a phishing scam. In some cases, malicious QR codes could also install malware to steal information from the consumer's phone.
Police departments around the country have been sharing warning messages on social media about the scams this holiday season.
The reports of the brushing scam started a few years ago with packages appearing on people's doorsteps. But when consumers were trying to figure out if it was something they ordered, they contacted Amazon or the retailer only to be told to just keep it, even if it wasn't something they ordered.
Many packages are from Amazon, but from third-party sellers – and an Amazon spokesperson said the company takes action against them.
The sellers are trying to boost their reviews, Jennifer Leach, associate director of the Federal Trade Commission's Bureau of Consumer and Business Education, told USA TODAY.
"Dishonest businesses and scammers are sending all sorts of unordered junk in the mail – and then writing good reviews for their business in your name," Leach.
"That’s bad for honest businesses, which don’t cheat to get reviews, but it could be bad for you, too," she said. "Getting this stuff in the mail could mean a scammer has created an account in your name, taken over your account on the shopping site, or even created new accounts in other names, but tied to your address."
The consumers receiving the product often aren't "harmed" in the scam – and they often get to keep the free product – so some call the brushing scams "victimless" crimes. But the items are usually things consumers don't necessary want and are inexpensive, like ping pong balls or a flashlight.
And future shoppers looking at reviews by the seller who sent the package could be making a bad buying decision based on pumped-up reviews.