Amazon brushing scams: why a package you didn't order showed up

Quick answer

A parcel you didn't order may be a "brushing" scam: sellers send packages to publicly available names and addresses. Check it isn't a gift, then report it to Amazon. Amazon says it investigates and can suspend sellers who break its rules.

All scam alerts
Comes by
Mail
Pretends to be
Amazon
Last updated

How it works

Amazon describes brushing scams as bad actors sending packages to publicly available names and addresses. Third-party sellers are prohibited from sending unsolicited packages to customers.

You can't see from the parcel why it was sent to you. Your name and address came from somewhere public, which is why the question to ask is where your details are listed.

Amazon says it investigates reports of brushing and may suspend or remove selling privileges, withhold payments and work with law enforcement.

Red flags

  • A parcel arrives that you didn't order and that isn't a gift
  • No order in your account and nobody you know ordered it
  • Your name and address are correct, but the sender is unknown
  • More than one unwanted package from the same source

What to do

  1. 1

    Check it isn't a gift

    Ask friends and family whether they sent or ordered it.

  2. 2

    Report it to Amazon

    If nobody you know ordered it, use Amazon's Report Unwanted Package form. Have the number of packages and a tracking number from the shipping label ready.

  3. 3

    Contact Customer Service for help

    You can also contact Amazon Customer Service to report it to the investigations team, or to ask about return options.

  4. 4

    Check your accounts

    Make sure your Amazon login is secure: change your password and turn on two-step verification if you're unsure.

  5. 5

    Find where your address is listed

    Search your name and address on people-search sites and request removal where it appears.

Report it

Serus

Check if your details are exposed with Serus

Scammers find your number and address on data brokers and people-search sites. Serus removes them.

Run a free scan

Why you got it

Brushing relies on names and addresses that are publicly available. People-search sites and data brokers list both, and breaches leak them. Serus finds the data brokers and people-search sites that list you and removes you from them, and alerts you when your details show up in a breach, so fewer scammers can reach you.

More Amazon scams

All common Amazon scams

Frequently asked

What is a brushing scam?

Per Amazon, bad actors send packages to publicly available names and addresses.

Should I report a package I didn't order?

Yes, once you've confirmed it isn't a gift. Amazon asks you to report it online.

What does Amazon do about brushing?

It investigates reports and may suspend or remove selling privileges, withhold payments and work with law enforcement.

Sources

Something wrong or out of date? Tell us and we'll re-check it.

Related scams

All scam alerts

Cookie preferences

Choose which categories we may use. Full details for every cookie are in our Cookie Policy.

Strictly necessary

Authentication, session management, security and fraud prevention, and saving your consent choice. Always active. The site cannot function without them.

Functional

Remember preferences such as language and settings that improve your experience.

Analytics

Help us understand how the site is used, like pages visited, interactions, and performance, so we can improve it.

Marketing & advertising

Measure our marketing and deliver more relevant ads through partners such as Google, Meta, TikTok, X, and Reddit. Used only with your consent.

Your choice is saved for 12 months and applies across serus.ai, including the app. You can change it anytime from the cookie widget or the "Cookie settings" link in the footer. Withdrawing consent does not affect processing that happened before withdrawal.