If you're a Texan who's ever opened your front door to find a mystery package you didn’t order, you’re not alone. From El Paso to Houston, brushing scams are quietly making their way to porches across the Lone Star State. These surprise deliveries might seem harmless- free stuff, right? -but they’re actually part of a shady scheme that uses your name and address to post fake online reviews. Here’s how the scam works, why Texans are being targeted, and what you should do if one of these boxes shows up at your door.

What Is a Brushing Scam?

A brushing scam is a deceptive tactic used by online sellers to boost their product rankings and reviews. It works like this: a seller creates a fake order using real names and addresses—often found through leaked or publicly available information—and ships out a cheap or random item. Once the delivery is confirmed, the scammer posts a glowing fake review under the recipient’s name to make the product look more popular and trustworthy.

The packages can range from things like earbuds, phone cases, socks, or even seeds- anything lightweight and inexpensive to ship. The catch? You never ordered it, and you’re not the actual customer. You’re just a name and address used to game the system.

In February, an El Pasoan was surprised to find a ring in a box that she never ordered, complete with an “authentication card” and a QR code requesting personal details. Her children correctly identified it as a brushing scam meant to plant malware on her device and potentially harvest data such as IP addresses.

What to Do if You’ve Been Targeted by a Brushing Scam

If you receive a package you didn’t order, it could be part of a brushing scam. Here’s how to protect yourself:

  • Don’t scan anything in the box—QR codes or links could be used to steal your personal data.
  • Report the package to the retailer (Amazon, for example) so they can investigate the sender.
  • Monitor your accounts for unusual activity. Even if no money was spent, your personal info may have been used.
  • Change passwords if you think you clicked or scanned something risky.
  • File a complaint with the FTC or BBB Scam Tracker to help stop repeat scams.
  • You’re not required to return it—by law, unsolicited items are yours to keep. But it’s best not to use them.

Brushing scams might seem harmless at first glance, but they’re part of a growing problem that puts your personal information at risk. If a mystery package shows up on your doorstep, don’t ignore it—and definitely don’t scan anything inside. With a little caution and quick action, you can protect yourself and help stop scammers from using Texas addresses to boost their bogus sales. Stay sharp, stay secure, and don’t let your mailbox become part of someone else’s scheme.

How Texans Can Protect Their Apple ID from 'Smishing' Scams

Cybercriminals are on the prowl. Please ensure you do not give them important information that will compromise your security.

Gallery Credit: Tara Holley

Expert Tips for Avoiding Online Shopping Scams

In order to avoid a scammer getting the better of you, check out the following red flags to look out for as well as preventative measures to take from Dr. Skiba, AKA Dr. Fraud himself:

Gallery Credit: Maria Danise

More From KLAQ El Paso