The Brushing Scam and Quishing Scam: What You Need to Know

Received a package you never ordered? Found a QR code in an unexpected text or email? You might be targeted by scammers using "brushing" or "quishing" tactics.

Brushing Scams occur when sellers ship unordered items to your address, then post fake positive reviews using your name. While you can keep the merchandise legally, this indicates scammers have your personal information. The real danger is identity theft, not the unwanted items.

Quishing Scams (QR code phishing) trick you into scanning malicious QR codes that lead to fake websites designed to steal your information or install malware. These codes often appear in texts, emails, or even physical mail claiming to be from trusted organizations.

If You're Targeted:

  • For brushing: Report to the retailer, change passwords on shopping accounts, and monitor credit reports.

  • For quishing: Never scan unexpected QR codes. Verify communications by contacting companies directly through official channels.

If you suspect you've been targeted by either scam, be sure to report it to the FTC at ReportFraud.ftc.gov.

Scams & Fraud EducationGuest UserScams, Fraud, First Lincoln Federal Credit Union, Federal Trade Commission