Unexpected Package Scam: Why You Received a Package You Never Ordered

Share this post on social...

Have you received a package at your home that you never ordered?

An unexpected delivery may be a simple shipping mistake, a gift from someone you know, or something more concerning. In some cases, unsolicited packages are associated with a scam known as a brushing scam.

The U.S. Postal Inspection Service warns that scammers may send inexpensive merchandise to people who did not order it and then use the recipient’s information to create fake product reviews or make a seller’s products appear more popular.

Some unexpected packages may also contain QR codes that lead to fraudulent websites. This type of QR-code phishing is known as quishing.

What Is an Unexpected Package Scam?

An unexpected package scam occurs when you receive merchandise that you did not purchase or request.

One common form is a brushing scam.

In a brushing scam, a seller or scammer may obtain a person’s name and address and send an inexpensive product to them. The transaction can then be used to make it appear that the recipient is a genuine customer.

The scammer may subsequently create a fake review in the recipient’s name to make the product appear more trustworthy.

According to the U.S. Postal Inspection Service, these fake reviews can be used to artificially increase a product’s ratings and sales.

Why Would Someone Send You a Package You Never Ordered?

There are several possible reasons.

1. To Create Fake Product Reviews

A seller may want to make it appear that real customers purchased and reviewed a product.

An unsolicited package can help create the appearance of a legitimate purchase even though the recipient never actually ordered the item.

2. To Make a Seller or Product Look More Popular

Fake purchases and reviews can potentially improve the perceived reputation of a product.

This can make other shoppers more likely to buy it.

3. To Exploit Your Personal Information

Receiving an unexpected package may also mean that someone has obtained basic information such as your name and address.

That does not automatically mean that your identity has been stolen, but it is a good reason to review your online shopping accounts and security settings.

The Postal Inspection Service warns that personal information can be misused for additional fraudulent activity.

4. To Encourage You to Scan a QR Code

Some unexpected packages contain a card with a QR code.

The message may tell you to scan the code to:

Identify the sender
Claim a gift
Learn more about the product
Receive a reward
Register an item
Contact the company

However, the QR code may lead to a fraudulent website.

What Is Quishing?

Quishing is short for QR-code phishing.

It occurs when scammers use QR codes to direct people to fraudulent websites designed to obtain personal, financial or login information.

The U.S. Postal Inspection Service specifically warns that QR codes have been incorporated into some brushing scams.

For this reason, you should not scan an unfamiliar QR code simply because it appears inside a package addressed to you.

Instead, independently visit the official website of the retailer or delivery company if you need to verify something.

Signs of an Unexpected Package Scam

Be cautious if:

You received a package you never ordered.
You don’t recognize the sender.
The package contains an inexpensive or random item.
There is no clear explanation for the delivery.
A card asks you to scan a QR code.
The QR code directs you to an unfamiliar website.
You are asked to provide personal information.
You are asked to enter payment details.
You are encouraged to write a positive review.
You receive a suspicious text or email about the package.

These signs do not necessarily prove that a package is fraudulent, but they are reasons to verify the situation carefully.

Don’t Scan an Unknown QR Code

One of the most important precautions is to avoid scanning QR codes found inside unexpected packages.

A QR code can make a scam seem legitimate because it provides a convenient way to access a website.

However, the website behind the QR code may not belong to the company it claims to represent.

The Postal Inspection Service recommends that consumers not scan unknown QR codes, particularly when they are associated with unsolicited packages.

What Should You Do If You Receive an Unexpected Package?

1. Don’t panic

An unexpected package does not automatically mean that you are a victim of identity theft.

It could be a legitimate gift, a delivery error or unsolicited merchandise.

Nevertheless, it is worth checking your accounts and taking reasonable precautions.

2. Don’t scan unfamiliar QR codes

If a package contains a QR code from an unknown sender, avoid scanning it.

Do not provide passwords, banking information, Social Security numbers or other sensitive information through a website you reached from an unfamiliar QR code.

3. Don’t use contact information supplied by an unknown sender

If the package contains a phone number, email address or website that you don’t recognize, avoid contacting the sender through that information.

If you need to contact a retailer, find its official website independently.

4. Check your shopping accounts

Review your recent orders on your shopping accounts.

Look for:

Orders you don’t recognize
New payment methods
Changed account information
Unknown addresses
Password changes
Unusual account activity

If you find suspicious activity, change your password and enable two-factor authentication where available.

5. Monitor your financial accounts

Review your bank and credit-card statements regularly.

If you see an unfamiliar transaction, contact your bank or card issuer using an official phone number or website.

6. Report the package when appropriate

If you believe the package is connected to fraud, you can report it to the appropriate retailer or authorities.

For U.S. mail-related scams, the U.S. Postal Inspection Service provides reporting resources.

You can also report suspected fraud to the Federal Trade Commission.

Do You Have to Pay for an Unexpected Package?

In the United States, unsolicited merchandise generally does not have to be paid for or returned.

The U.S. Postal Inspection Service states that recipients may keep unsolicited merchandise and do not have to pay for it.

However, that does not mean you should automatically use an unfamiliar product.

If the package contains something that you don’t recognize or that could potentially be unsafe, exercise caution.

What If the Package Contains Seeds, Food or an Unknown Substance?

Use extra caution if an unexpected package contains:

Seeds
Plants
Food
Powders
Liquids
Unidentified substances

Do not consume or use an unfamiliar product simply because it was delivered to your address.

If you believe the package may contain a suspicious substance, avoid unnecessary contact with it and follow the guidance of the appropriate authorities.

The U.S. Postal Inspection Service recommends isolating suspicious mail, maintaining a safe distance and contacting postal inspectors when appropriate.

What If You Already Scanned the QR Code?

If you scanned a QR code from an unexpected package, don’t panic.

If you did not enter any information, close the website and avoid interacting with it further.

If you entered a password, change that password immediately. If you reused the same password elsewhere, change it on those accounts as well.

If you provided financial information, contact your financial institution through an official channel and explain what happened.

You should also monitor your accounts for unusual activity.

What If You Received a Package From Amazon or Another Online Marketplace?

If an unexpected package appears to come from Amazon, eBay or another marketplace, check your account directly through the company’s official website.

Do not use a link or QR code supplied inside the package to investigate the delivery.

The Postal Inspection Service recommends contacting the retailer through its website and reporting suspected fraudulent activity.

If fake reviews were created using your name, you can also ask the retailer or marketplace to investigate and remove them.

Unexpected Package vs. Package Delivery Text Scam

An unexpected package and a package-delivery text scam are not necessarily the same thing.

In a brushing scam, the physical package itself may be unsolicited.

In a smishing scam, you may receive a text message claiming that a package requires your attention.

For example, a message might claim that your delivery address is incorrect or that you need to pay a small fee.

The U.S. Postal Inspection Service warns consumers not to click unfamiliar links in unexpected package-delivery text messages.

If you are expecting a delivery, verify its status by visiting the carrier’s official website yourself rather than clicking a link in an unexpected message.

How to Protect Yourself From Package Scams

You can reduce your risk by following these simple precautions:

Use strong, unique passwords.
Enable two-factor authentication.
Review online shopping orders regularly.
Monitor bank and credit-card statements.
Be cautious about unsolicited packages.
Don’t scan unfamiliar QR codes.
Don’t click unexpected delivery links.
Don’t provide sensitive information to unknown senders.
Verify delivery information through official websites.
Report suspicious activity when appropriate.

Final Verdict: Is an Unexpected Package a Scam?

Receiving an unexpected package does not automatically mean that you are being scammed.

However, unsolicited merchandise can be associated with brushing scams, in which sellers attempt to create fake purchases or reviews. Some variations may also use QR codes to direct recipients to phishing websites.

The safest approach is to remain cautious.

Don’t scan unfamiliar QR codes, don’t provide sensitive information, check your shopping accounts and verify the situation through official channels.

If the package contains suspicious or unidentified material, avoid unnecessary contact and follow appropriate safety guidance.

Frequently Asked Questions

What is an unexpected package scam?

An unexpected package scam involves receiving merchandise that you did not order. One common version is a brushing scam, where unsolicited merchandise may be used to create fake purchases or reviews.

Why did I receive a package I didn’t order?

It could be a legitimate gift, delivery mistake or unsolicited merchandise. In some cases, it may be part of a brushing scam.

Should I scan a QR code inside an unexpected package?

It is safer not to scan an unfamiliar QR code. QR codes associated with unexpected packages can lead to fraudulent websites designed to obtain personal information.

Do I have to pay for a package I didn’t order?

In the United States, recipients generally do not have to pay for unsolicited merchandise. The U.S. Postal Inspection Service says unsolicited merchandise can generally be kept without payment.

Can an unexpected package mean someone has my personal information?

Possibly. A scammer may have obtained information such as your name and address. Receiving a package alone does not prove that your identity has been stolen, but reviewing your accounts and security settings is a sensible precaution.

What should I do if I receive an unexpected package?

Don’t scan unfamiliar QR codes or provide personal information. Check your shopping accounts, monitor your financial accounts and report suspicious activity through official channels.

Helpful Official Resources

Disclaimer: This article is provided for general scam-awareness and consumer-education purposes. It is not legal, financial or cybersecurity advice. Always verify suspicious deliveries and communications through the official website of the relevant company or government agency.