Greg's Corner

What is the Soup Can Scam?

By Greg Collier

The original brushing scam is deceptively simple. Third-party sellers, often operating through online marketplaces, send inexpensive items to people who never ordered them. The goal is not theft but visibility. Once the item arrives, the seller creates a fake customer profile using the recipient’s address, then posts a glowing review to artificially boost their product’s ranking. This tactic helps manipulate online algorithms, giving disreputable sellers a competitive edge by appearing more legitimate through fake feedback.

However, scammers have evolved.

A new variation on this scheme has surfaced, one that is less about product reviews and more about financial reconnaissance. In this version, the package is not meant to flatter a storefront’s reputation, but to quietly confirm whether a stolen credit card works. A small, low-cost item like a can of soup is purchased and sent to a real address, often with a different name on the label. If the transaction goes through and the package is delivered without raising suspicion, the scammer then feels emboldened to make larger purchases using the same card. The item is a test. The address is a probe. And the real target is someone whose financial information may already be compromised.

For the recipient, it can be an unsettling experience. The presence of a package that was never ordered, addressed to a stranger but bearing one’s own address, triggers questions. Is it a simple mistake or something more sinister?

Legally, the item becomes yours if it arrives at your doorstep unsolicited. You are not required to return it. Still, some recipients may prefer to notify the carrier or mark it for return, especially if the situation seems suspicious or if they suspect identity theft. The key is vigilance. A seemingly harmless delivery could be the beginning of a broader fraud attempt.

Reports of these unexpected deliveries are increasing. While the sight of a random item like canned soup might seem absurd, it may be the precursor to more serious abuse of stolen data. Knowing the difference between a clerical error and a calculated move by a scammer is essential in an age where fraud is often disguised in the most mundane ways.