Amazon Brushing Scams in 2025: Protecting Your Identity from Fake Orders and Reviews

As an experienced cyber security expert specializing in cloud data protection, I‘ve seen firsthand how online fraud schemes continue to evolve and proliferate. One growing threat that could affect any Amazon shopper is the "brushing" scam. According to a 2022 report from the Better Business Bureau, complaints about brushing scams increased by 18% year-over-year. In 2024, I expect this trend to accelerate as scammers exploit the continued growth of e-commerce and consumers‘ personal data.

What is an Amazon Brushing Scam?

Brushing is a deceptive tactic used by unscrupulous third-party sellers, usually based overseas, to game Amazon‘s ranking algorithms and boost their products‘ visibility. The scammer will obtain people‘s names and addresses through various means (hacking retailer databases, scraping data broker sites, or purchasing stolen info on the dark web).

They then create fake Amazon accounts tied to these addresses and place gift orders for their own products to be sent to unsuspecting recipients. Once the items are delivered, the scammer writes glowing reviews posing as the "verified buyer" to legitimize the transaction. Higher sales numbers and positive ratings make the seller‘s products appear more popular, ranking them higher in search results to attract real customers.

Brushing operations can be highly sophisticated, spanning hundreds or thousands of fake accounts and identities. Scammers will often use bots to automate account creation and posting reviews across many items. Frequently brushed products include lightweight goods that are cheap to ship in bulk, such as fake Bluetooth accessories, phone cases, or costume jewelry.

However, there have also been reports of higher-value items like laptops and smartphones being used in brushing scams. The product itself is usually irrelevant, as the scammer‘s goal is simply to falsely inflate sales metrics and manipulate reviews. Some sellers will even run promotions on their items to make them more enticing for brushing.

Why Brushing Scams Are So Dangerous

While getting unexpected freebies in the mail may seem like an odd but harmless mistake, brushing scams pose serious risks to victims. The unknown sender has your name and address – and potentially other sensitive personal details – which could be weaponized for financial fraud and identity theft.

With access to your data, scammers can open new credit cards or take out loans in your name, hack into your online accounts, or sell your information to other criminals on the dark web. A 2022 survey by the Identity Theft Resource Center found that over 40% of Americans have been victims of identity fraud, with losses exceeding $50 billion per year.

Receiving unsolicited packages could also get you into legal trouble in certain situations. In some cases of brushing fraud reported to the USPS, the packages contained illegal or regulated goods like fake medications, firearms, or drug paraphernalia. Even if you didn‘t order the contraband, just having it delivered to your address could raise suspicions.

How to Respond to a Suspected Brushing Scam

If mysterious merchandise shows up at your door, don‘t panic but do stay alert. First, verify that the package isn‘t a forgotten order or surprise gift by checking your Amazon purchase history and asking family and friends.

If it‘s clearly not something you bought, contact Amazon customer service to report the unsolicited delivery. Provide the order details and explain that you didn‘t make the purchase and don‘t know the sender. The FTC advises that you are legally allowed to keep unordered items, but I recommend refusing the delivery if possible to avoid potential scams.

Critically, report the incident to the FTC at ftc.gov/complaint and to your state‘s Attorney General consumer protection office. This helps authorities track brushing schemes and build cases against perpetrators.

Proactive Steps to Protect Yourself from Brushing Scams and ID Theft

While you can‘t control whether a scammer has obtained your personal information, you can take precautions to secure your data and minimize risk:

1. Enable Account Alerts: Log into your Amazon account and enable notifications for any new orders placed. Under "Message center settings", choose "Deals, recommendations, and reminders" and "Order updates". This will alert you of brushing purchases made in your name.

2. Use Strong Security Credentials: Create a unique, complex password for your Amazon.com account using a combination of upper and lowercase letters, numbers, and special characters. Enable two-factor authentication (2FA) for an extra security layer. Consider using a password manager like LastPass or 1Password to generate and securely store logins.

3. Monitor Your Credit: Regularly check your credit card statements and bank activity for any suspicious transactions. An identity theft protection service like LifeLock, Identity Guard or Experian IdentityWorks can monitor use of your personal info and alert you to signs of fraud.

4. Limit Public Data Exposure: Be cautious about sharing personal details online or with unfamiliar companies. Opt-out of data broker sites that sell your info like WhitePages, Spokeo, and BeenVerified.

5. Keep Software Updated: Make sure your devices‘ operating systems, browsers, and apps are updated to patch any security vulnerabilities. Install well-reviewed antivirus software and a VPN on all computers and mobile devices you use for shopping.

6. Stay Informed: Follow trusted cyber security blogs and newsletters to stay current on the latest consumer threats and prevention tips. Check out resources from The FTC, The Identity Theft Resource Center, The Better Business Bureau, and The National Cybersecurity Alliance.

The Future of Brushing Scams and E-Commerce Fraud

Looking ahead, I anticipate brushing scams will continue to grow in scale and sophistication. As more consumers embrace online shopping post-pandemic, scammers will likely expand to other retail platforms like Walmart, Wayfair, and Alibaba. Hackers have even targeted online stores for stolen user data, which can feed more realistic brushing operations.

Emerging technologies like AI and machine learning could become double-edged swords. Cyber criminals may use advanced algorithms to better impersonate legitimate customers‘ shopping behaviors and posting patterns to avoid detection. However, retailers are also investing heavily in AI-powered systems to analyze big data and proactively flag suspicious activity.

Ultimately, combating brushing fraud will require a joint effort between retailers, security professionals, law enforcement, and savvy consumers. As an expert with over a decade of experience, I believe that awareness and education are our best defenses.

By understanding how brushing scams work, taking steps to safeguard your data, and promptly reporting any suspected fraud, you can protect yourself and help stop these schemes from proliferating. Retailers also have a responsibility to invest in cutting-edge security measures, promptly notify affected customers, and coordinate with global law enforcement to bring scammers to justice.

Together, we can fight back against the brush and build a safer online shopping experience for all. Stay vigilant!