Greg's Corner

Diamond in the Mail Leads to New Brushing Scam

By Greg Collier

Imagine opening your mailbox and finding an unexpected package. Inside is a dazzling piece of jewelry, perhaps a diamond ring, along with a card inviting you to “register your precious gem.” This was the experience of a woman from Pittsburgh, who recently found herself at the center of a strange and unsettling scam.

She opened the package to find what appeared to be a beautiful diamond ring. Confused, she wondered if the delivery had been sent to the wrong address. The package looked legitimate, complete with her name, address, and an official-looking USPS barcode. Along with the ring, there was a card explaining how to register the item, accompanied by another card with a QR code.

At first, it seemed like an honest mistake, but her instincts told her something was off. Despite rarely shopping online, she was cautious. The ring looked valuable, but why would anyone send her such an item unsolicited? Trusting her gut, she decided not to scan the QR code or register the product, a decision that likely saved her from falling victim to a scam.

This experience is part of a larger phenomenon called the brushing scam, a growing scam spreading across the country. Scammers send unsolicited items to random people, using their addresses to post fake positive reviews on online marketplaces. The QR code included in these packages often leads to fraudulent websites designed to steal personal or financial information.

The Pittsburgh woman’s experience is a textbook example of how these scams operate. The seemingly luxurious item is meant to entice the recipient into engaging further, whether by scanning a QR code or providing personal details on a fake website. Fortunately, her caution prevented her from falling into the trap, but not everyone may be as wary.

QR codes, while convenient, can be as dangerous as phishing links if they come from an unverified source. Scanning them without knowing their origin could lead to malware, identity theft, or financial fraud. It’s a reminder that in today’s digital age, trust must be earned.

The United States Postal Service and other consumer protection agencies have warned about the dangers of brushing scams. They advise anyone who receives unsolicited items to avoid following any instructions provided, particularly those involving QR codes or registration websites. Instead, report the package to local postal authorities or consumer protection organizations.

For those who find themselves in a similar situation, the advice is clear: if you didn’t order it, don’t trust it. Whether it’s a fake diamond ring or another enticing item, these unsolicited packages are designed to manipulate and exploit. Trusting your instincts can help protect you and others from falling victim to these increasingly sophisticated schemes.