# Anyone else being the 'victim' of a brushing scam?

**URL:** <https://boards.straightdope.com/t/anyone-else-being-the-victim-of-a-brushing-scam/1023359>\
**Category:** Miscellaneous and Personal Stuff I Must Share\
**Created:** [September 24, 2025, 3:06pm UTC](https://boards.straightdope.com/t/anyone-else-being-the-victim-of-a-brushing-scam/1023359 "2025-09-24T15:06:37Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![StarvingButStrong](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/starvingbutstrong/32/335_2.png) [@StarvingButStrong](https://boards.straightdope.com/u/StarvingButStrong)\
**Post date:** [September 24, 2025, 3:06pm UTC](https://boards.straightdope.com/t/anyone-else-being-the-victim-of-a-brushing-scam/1023359/1 "2025-09-24T15:06:37Z")

</div>

A little over two weeks ago we started getting small packages addressed to “Colin Boone” several times week, both from Amazon directly and passed through USPS. Now, this house was owned by hubby’s parents before us, for a total of a little over 50 years of continuous occupation by people with our last name, No one by that name, or any part of it, has lived here, been a guest here, or even come to a gathering so far as we know.

So apparently it’s a ‘brushing scam.’ At first we assumed it was a mistake and took the trouble to mark the packages “not at this address” for the USPS ones, and actually dropped two of them off at an Amazon place we happen to pass for other reasons several times a week.

But they kept coming. Finally we got a bubble-type package that had been completely sliced in half, retaped, with a clearly handwritten note enclosed that said “Sorry, opened in error.” so we decided to open it again. A tiny plastic bag of multicolored balloons, maybe ten or so! Yay!

Finally we went to the trouble – and time! – calling Amazon customer service, and they confirmed it looked like a classic scam, that they would try to stop the deliveries, and we should do whatever we pleased with any further deliveries for Mister Boone.

And, of course, we promptly got THREE more packages today. So we had an opening party to see what the Internet is gifting us with. We got:

- a package of paintbrushes. Ones with plastic round handles in all different colors, with the bristle bundles about 3/4” in diameter. Like way sized-up watercolor brushes?
- a plastic doodad we’re guessing is some specialized kitchen gadget? Or maybe a shop tool? Had no wrapping or label at all included.
- five packages of zip lock/cable ties! All black, each package labeled as “count 100” but of different sizes: 4, 5, 8, 10, and 12” long. The heck? Who needs ziplock ties of that size? Maybe you could use them as improvised handcuffs?

We plan to gift the brushes to our church’s stash of random art supplies for kid’s projects, but the rest…. Anyone need 500 zip ties?

Why couldn’t they at least send stuff with some chance of being useful to random people? Send us candy. Cans of some soup. Erasers. Little toys for kids?

Anybody else getting ‘gifts’ from the universe?

---

<div class="post-metadata">

**Author:** ![StGermain](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/stgermain/32/2868_2.png) [@StGermain](https://boards.straightdope.com/u/StGermain)\
**Post date:** [September 24, 2025, 3:18pm UTC](https://boards.straightdope.com/t/anyone-else-being-the-victim-of-a-brushing-scam/1023359/2 "2025-09-24T15:18:13Z")

</div>

What is the point of this scam? Is it a prank of some kind?

StG

---

<div class="post-metadata">

**Author:** ![Czarcasm](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/czarcasm/32/4050_2.png) [@Czarcasm](https://boards.straightdope.com/u/Czarcasm)\
**Post date:** [September 24, 2025, 3:23pm UTC](https://boards.straightdope.com/t/anyone-else-being-the-victim-of-a-brushing-scam/1023359/3 "2025-09-24T15:23:50Z")

</div>

Is there a way to give extremely bad reviews for these products on Amazon?

---

<div class="post-metadata">

**Author:** ![LSLGuy](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/lslguy/32/5813_2.png) [@LSLGuy](https://boards.straightdope.com/u/LSLGuy)\
**Post date:** [September 24, 2025, 3:24pm UTC](https://boards.straightdope.com/t/anyone-else-being-the-victim-of-a-brushing-scam/1023359/4 "2025-09-24T15:24:25Z")

</div>

> [@StarvingButStrong](#):
>
> So apparently it’s a ‘brushing scam.’

Would you care to define that?

---

<div class="post-metadata">

**Author:** ![Jasmine](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/jasmine/32/2964_2.png) [@Jasmine](https://boards.straightdope.com/u/Jasmine)\
**Post date:** [September 24, 2025, 3:28pm UTC](https://boards.straightdope.com/t/anyone-else-being-the-victim-of-a-brushing-scam/1023359/5 "2025-09-24T15:28:46Z")

</div>

> [@StGermain](#):
>
> What is the point of this scam? Is it a prank of some kind?

My question, exactly. The purpose of a “scam” is illicit profit. The purpose of a prank is a practical joke. I would term this as the latter, but carrying it on and on seems like a tremendous amount of effort, and they can’t even see the results of that effort. I’m not getting this.

---

<div class="post-metadata">

**Author:** ![markn\_1](https://avatars.discourse-cdn.com/v4/letter/m/f9ae1b/32.png) [@markn\_1](https://boards.straightdope.com/u/markn_1)\
**Post date:** [September 24, 2025, 3:37pm UTC](https://boards.straightdope.com/t/anyone-else-being-the-victim-of-a-brushing-scam/1023359/6 "2025-09-24T15:37:25Z")

</div>

> **[Got a package you didn’t order? It’s probably a scam](https://consumer.ftc.gov/consumer-alerts/2025/01/got-package-you-didnt-order-its-probably-scam)**
>
> What could be better than opening the mailbox or the front door and finding an unexpected package? Free gifts might seem like fun — but when an unexpected package lands on your doorstep, it may come with a higher cost than you expected.

> Scammers or sellers of knock-off merchandise find your address or other personal information online. They send you goods you never ordered and use your information to write fake online reviews about their products in your name — which helps them boost sales.

---

<div class="post-metadata">

**Author:** ![HMS\_Irruncible](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/hms_irruncible/32/7394_2.png) [@HMS\_Irruncible](https://boards.straightdope.com/u/HMS_Irruncible)\
**Post date:** [September 24, 2025, 3:40pm UTC](https://boards.straightdope.com/t/anyone-else-being-the-victim-of-a-brushing-scam/1023359/7 "2025-09-24T15:40:58Z")

</div>

> [@StGermain](#):
>
> What is the point of this scam? Is it a prank of some kind?

No, the scammer is trying to legitimize a fake e-commerce account by having items delivered to it. Any physical address will work as long as it accepts package deliveries.

The person receiving the junk delivery is really just a bystander, neither scammed nor scammer.

Each time an “order” is delivered, it can be given a high customer rating by the fake customer, so that the seller’s profile is rated higher and gets more visibility.

It’s called [brushing](https://en.wikipedia.org/wiki/Brushing_(e-commerce)) for those who aren’t familiar.

---

<div class="post-metadata">

**Author:** ![StarvingButStrong](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/starvingbutstrong/32/335_2.png) [@StarvingButStrong](https://boards.straightdope.com/u/StarvingButStrong)\
**Post date:** [September 24, 2025, 3:42pm UTC](https://boards.straightdope.com/t/anyone-else-being-the-victim-of-a-brushing-scam/1023359/8 "2025-09-24T15:42:33Z")

</div>

> [@LSLGuy](#):
>
> Would you care to define that?

What I gathered from the Amazon Service Person is that the idea is for the company/fulfillment company? to build up their ‘reliability rating’ on Amazon. They send some cheap item they make/handle to (lots) of random people whose names/passwords they get from various security breaches. Then they log in as, in this case, Colin Boone, and leave a glowing review. (Fast delivery! Great packaging! Exactly what I wanted!) and thus other shoppers are deluded into ordering whatever from their company.

Apparently there’s no intention of actually making any money off the people they mail the random stuff to, they just want the package to be marked as a ‘confirmed purchase’ for the algorithm to be able to say “100s of satisfied customers!”

Seems weird to me. But so does a lot of Internet stuff.

Anyway, the rep said it’s evidence that my account/password was in one of those mass data leaks, so I should change their password, and probably a whole lot of other ones. Which is a nuisance, but I did it.

---

<div class="post-metadata">

**Author:** ![Czarcasm](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/czarcasm/32/4050_2.png) [@Czarcasm](https://boards.straightdope.com/u/Czarcasm)\
**Post date:** [September 24, 2025, 3:42pm UTC](https://boards.straightdope.com/t/anyone-else-being-the-victim-of-a-brushing-scam/1023359/9 "2025-09-24T15:42:58Z")

</div>

Like I said, get the bad review posted ASAP and the “good” scam review is at least partially blocked.

---

<div class="post-metadata">

**Author:** ![Just\_Asking\_Questions](https://avatars.discourse-cdn.com/v4/letter/j/ba9def/32.png) [@Just\_Asking\_Questions](https://boards.straightdope.com/u/Just_Asking_Questions)\
**Post date:** [September 24, 2025, 3:44pm UTC](https://boards.straightdope.com/t/anyone-else-being-the-victim-of-a-brushing-scam/1023359/10 "2025-09-24T15:44:02Z")

</div>

> [@StarvingButStrong](#):
>
> 12” long. The heck? Who needs ziplock ties of that size?

I use them a lot. Mostly to anchor outside decorations, or mini flags to fences, or yard cameras to posts. If you lived close, I’d take all the zip ties.

---

<div class="post-metadata">

**Author:** ![Pork\_Rind](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/pork_rind/32/111_2.png) [@Pork\_Rind](https://boards.straightdope.com/u/Pork_Rind)\
**Post date:** [September 24, 2025, 3:48pm UTC](https://boards.straightdope.com/t/anyone-else-being-the-victim-of-a-brushing-scam/1023359/11 "2025-09-24T15:48:58Z")

</div>

Yeah, but that’s the whole point of the scheme. You can’t review a product on Amazon that you did not order. Whoever snatched Colin Boone’s account is the only person that can submit reviews for those deliveries.

---

<div class="post-metadata">

**Author:** ![Czarcasm](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/czarcasm/32/4050_2.png) [@Czarcasm](https://boards.straightdope.com/u/Czarcasm)\
**Post date:** [September 24, 2025, 3:53pm UTC](https://boards.straightdope.com/t/anyone-else-being-the-victim-of-a-brushing-scam/1023359/12 "2025-09-24T15:53:17Z")

</div>

You have the order number, the correct address and the name. That isn’t enough?

---

<div class="post-metadata">

**Author:** ![Pork\_Rind](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/pork_rind/32/111_2.png) [@Pork\_Rind](https://boards.straightdope.com/u/Pork_Rind)\
**Post date:** [September 24, 2025, 3:54pm UTC](https://boards.straightdope.com/t/anyone-else-being-the-victim-of-a-brushing-scam/1023359/13 "2025-09-24T15:54:24Z")

</div>

No, not at all. You have to have the account credentials. You have to be able to login as the person that made the order.

---

<div class="post-metadata">

**Author:** ![Czarcasm](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/czarcasm/32/4050_2.png) [@Czarcasm](https://boards.straightdope.com/u/Czarcasm)\
**Post date:** [September 24, 2025, 3:55pm UTC](https://boards.straightdope.com/t/anyone-else-being-the-victim-of-a-brushing-scam/1023359/14 "2025-09-24T15:55:17Z")

</div>

Ahhh. Thank you.

---

<div class="post-metadata">

**Author:** ![Pork\_Rind](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/pork_rind/32/111_2.png) [@Pork\_Rind](https://boards.straightdope.com/u/Pork_Rind)\
**Post date:** [September 24, 2025, 4:01pm UTC](https://boards.straightdope.com/t/anyone-else-being-the-victim-of-a-brushing-scam/1023359/15 "2025-09-24T16:01:41Z")

</div>

And to close the loop, the reason Amazon insists on that level of security is because back when you used to be able to review _any_ product regardless of purchase, they had an epidemic of fake reviews, both positive and negative. So now, to keep a seller from inflating their stats, or a competitor from trashing a product, they only allow actual purchasers to submit. Or, to my dismay, to keep heroes like [Henry Raddick](https://www.theregister.com/2002/06/13/henry_raddick_man_of_letters/) from posting [spoof reviews](https://www.theguardian.com/technology/2012/may/05/amazon-spoof-reviews-satire) for the comedic factor.

---

<div class="post-metadata">

**Author:** ![Robot\_Arm](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/robot_arm/32/18280_2.png) [@Robot\_Arm](https://boards.straightdope.com/u/Robot_Arm)\
**Post date:** [September 24, 2025, 4:08pm UTC](https://boards.straightdope.com/t/anyone-else-being-the-victim-of-a-brushing-scam/1023359/16 "2025-09-24T16:08:59Z")

</div>

> [@StarvingButStrong](#):
>
> A little over two weeks ago we started getting small packages addressed to “Colin Boone” several times week,…

At least they weren’t to Terrence Halsey; that can only lead to trouble.

(If anybody gets that reference, I’ll be very impressed.)

---

<div class="post-metadata">

**Author:** ![Just\_Asking\_Questions](https://avatars.discourse-cdn.com/v4/letter/j/ba9def/32.png) [@Just\_Asking\_Questions](https://boards.straightdope.com/u/Just_Asking_Questions)\
**Post date:** [September 24, 2025, 4:49pm UTC](https://boards.straightdope.com/t/anyone-else-being-the-victim-of-a-brushing-scam/1023359/17 "2025-09-24T16:49:15Z")

</div>

> [@Robot\_Arm](#):
>
> Terrence Halsey

Ha! Jimmy boy!

---

<div class="post-metadata">

**Author:** ![WildaBeast](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/wildabeast/32/6_2.png) [@WildaBeast](https://boards.straightdope.com/u/WildaBeast)\
**Post date:** [September 24, 2025, 5:24pm UTC](https://boards.straightdope.com/t/anyone-else-being-the-victim-of-a-brushing-scam/1023359/18 "2025-09-24T17:24:48Z")

</div>

> [@Pork\_Rind](#):
>
> No, not at all. You have to have the account credentials. You have to be able to login as the person that made the order.

But could they not just create a new Amazon account under a random fake name, use that account order items shipped to a random address they picked from the phone book, and use that account to post reviews? What advantage is there to stealing someone’s credentials? I suppose it might look less suspicious if the account ordered things from other merchants as well.

---

<div class="post-metadata">

**Author:** ![Pork\_Rind](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/pork_rind/32/111_2.png) [@Pork\_Rind](https://boards.straightdope.com/u/Pork_Rind)\
**Post date:** [September 24, 2025, 5:48pm UTC](https://boards.straightdope.com/t/anyone-else-being-the-victim-of-a-brushing-scam/1023359/19 "2025-09-24T17:48:14Z")

</div>

Yeah, that I don’t know. I assume that there’s something in Amazon’s system that flags brand new accounts doing things like this.

---

<div class="post-metadata">

**Author:** ![suranyi](https://avatars.discourse-cdn.com/v4/letter/s/e36b37/32.png) [@suranyi](https://boards.straightdope.com/u/suranyi)\
**Post date:** [September 24, 2025, 6:19pm UTC](https://boards.straightdope.com/t/anyone-else-being-the-victim-of-a-brushing-scam/1023359/20 "2025-09-24T18:19:08Z")

</div>

That’s exactly what they do in these brushing scams. They set up fake accounts with real addresses, send random items to those real addresses, then log into their own fake accounts to post a review.

it isn’t the person receiving those items that’s the one being scammed. He’s just an innocent bystander. The person being scammed is Amazon and its customers.

[Next page](https://boards.straightdope.com/t/anyone-else-being-the-victim-of-a-brushing-scam/1023359.md?page=2)
