A plain white envelope appears in your mailbox with your name on it. When you open it, there is nothing inside. This is not a delivery error; it is often a sign of a "brushing" scam.
In this scheme, third-party sellers send cheap items or empty packages to real addresses to generate a tracking number. They use that delivery record to post fake "verified buyer" reviews online, artificially boosting their sales rankings. While this may seem like a nuisance, it indicates that your name and address are likely compromised and available to criminals.
The danger escalates if the package includes a QR code. Scammers use these to direct you to phishing websites designed to steal login credentials, credit card numbers, and other sensitive data. If you receive a mystery package, do not scan any codes, do not call any numbers listed inside, and do not click any links.
If you have already scanned a code and entered information, take immediate action. Change passwords for any affected accounts, enable two-factor authentication, and contact your bank to report potential fraud. Monitor your credit reports and statements for unauthorized activity.
To reduce your exposure, consider using a data removal service to purge your information from broker sites. For ongoing protection, use comprehensive antivirus software with phishing blocking to secure your devices against malicious links.