# An unexpected parcel can be a fake-review or QR-phishing trap

A delivered parcel can help manufacture a buyer review. A QR code asking you to identify the sender may lead to a fake site.

[Canonical HTML page](https://nosecrets.app/en/stories/unexpected-parcel-brushing-qr-code)

Published by: [No Secrets Research](https://nosecrets.app/en/about#methodology)
Added: 2026-10-20
Topic: Everyday life

## Scope and context

Applies to: United States · unsolicited parcels and QR phishing warnings
Time context: FTC alert August 2026; postal guidance updated March 2025
Sources checked: 2026-10-20

An unfamiliar package is not proof that your account was hacked. Verify gifts and delivery mistakes independently; these warnings describe a known pattern.

## Why send something for free?

FTC's August 2026 alert explains that sellers can use delivery records to support fake reviews under a recipient's name. Cheap goods become a cost of manipulating the marketplace's apparent reputation.

[1: FTC](https://consumer.ftc.gov/consumer-alerts/2026/08/unexpected-package-you-got-could-be-brushing-scam)

## The QR code adds another risk

The Postal Inspection Service describes brushing packages with QR codes directing recipients to imitation websites. Requests to identify a mystery sender can become requests for credentials or payment information.

[2: US Postal Inspection Service](https://www.uspis.gov/news/scam-article/brushing-scam)

## Verify outside the package

Our checklist: open the marketplace through its known app, inspect orders and report suspicious listings there. If you entered credentials on an unfamiliar site, change them through the real service and review account activity.

[1: FTC](https://consumer.ftc.gov/consumer-alerts/2026/08/unexpected-package-you-got-could-be-brushing-scam) · [2: US Postal Inspection Service](https://www.uspis.gov/news/scam-article/brushing-scam)

## Sources

1. [That unexpected package you got could be a brushing scam](https://consumer.ftc.gov/consumer-alerts/2026/08/unexpected-package-you-got-could-be-brushing-scam) — FTC. 2026-08. Connects unsolicited packages, fabricated reviews and QR phishing.

2. [Brushing Scam](https://www.uspis.gov/news/scam-article/brushing-scam) — US Postal Inspection Service. 2025-03-24. Explains the mechanism and practical response.

## Disclosure

AI-assisted research, writing and translation by No Secrets, using the linked public documents. This is a source summary, not firsthand reporting or an independently audited investigation. No affiliate links are used in this article.

The source-check date is not the event date. Original documents control if a summary differs.