Online shopping has become a part of our daily lives, offering convenience and endless options. But with the rise of e-commerce, new types of scams are emerging to exploit this booming industry. One of the most alarming ones is the Brushing Scam in India. It might sound unfamiliar at first, but if you’ve ever received a package you didn’t order, you could already be a victim.

Let’s break it down so that you can understand how it works, its dangers, and how to protect yourself.
What is a Brushing Scam in India?
The brushing scam is a deceptive tactic used by fraudsters to inflate product ratings and reviews on e-commerce platforms like Amazon, Flipkart, or AliExpress.
The scammers send unsolicited packages containing random, often low-value items, such as costume jewelry, gadgets, or seeds, to unsuspecting individuals.
Once the package is delivered, these fraudsters post fake, glowing reviews using the recipient’s name to make their product appear popular and trustworthy.
In other words, they’re creating an illusion of high sales and quality to attract real buyers. It’s a clever trick but poses serious risks to both consumers and the e-commerce ecosystem!
How does the Brushing Scam work?
Let me explain it step by step-
Steps | What Happens? | Details |
Step 1 | Fake Accounts | Scammers create fake accounts on e-commerce platforms using stolen or fabricated personal details. |
Step 2 | Fake Orders | They place orders for their own products using these accounts, often with fake or stolen addresses. |
Step 3 | Unsolicited Packages | Recipients receive random packages they didn’t order. These might include cheap items like keychains or earbuds. |
Step 4 | Fake Reviews | Using the recipient’s name, scammers post glowing reviews on the product page, boosting its ratings. |
Step 5 | Misleading Buyers | These fake reviews trick real buyers into purchasing low-quality or counterfeit products. |
Why is the Brushing Scam in India Gaining Attention?
India’s e-commerce market is growing at an incredible pace, with millions of online shoppers every day. This rapid growth has made the country a target for brushing scams. Here’s why-
- High E-commerce Penetration: Platforms like Amazon, Flipkart, and Snapdeal are household names, making India a lucrative market for scammers.
- Data Breaches: With increasing cybercrimes, personal data such as names and addresses are often leaked or sold illegally.
- Unregulated Reviews: Many platforms struggle to identify and remove fake reviews, making it easier for scammers to operate.
Why Should You Care About Brushing Scams?
At first glance, receiving a free package might seem harmless. But there’s more to it than meets the eye. Here’s why you should be concerned-
- Your Data Might Be Compromised: The fact that you received a package suggests that your name and address are in the hands of scammers. This could be the result of a data breach or illegal data purchase.
- Identify Theft Risks: In some cases, scammers may use your details to create fake accounts, leaving you vulnerable to identity theft.
- Online Reputation at Stake: If fake reviews are posted using your name, it could tarnish your online reputation. Imagine being linked to counterfeit or low-quality products!
- Misleading Other Consumers: These scams manipulate the system, leading genuine buyers to trust and purchase subpar products. This not only harms consumers but also ethical sellers who lose credibility.
How to Identify a Brushing Scam?
Not sure if you’ve been targeted? Here are some obvious signs-
- Unsolicited Packages: Receiving random packages you didn’t order is the biggest red flag.
- Low-Value Items: The packages often contain cheap products like trinkets, cables, or small gadgets.
- No Record in Purchase History: No Record in Purchase History: Check your e-commerce account. If there’s no record of the order, it’s likely part of a brushing scam.
How do Scammers get the addresses of their Victims in Brushing Scams?

The backbone of brushing scams is access to personal information, particularly addresses. But how do scammers manage to get this information? In the following ways-
Data Breaches from E-Commerce Platforms
One of the most common ways scammers obtain addresses is through data breaches on e-commerce platforms. When these websites experience security lapses, hackers gain access to users’ personal information, including names, addresses, phone numbers, and sometimes even payment details.
For instance, a 2020 report by Risk Based Security revealed that 36 billion records were exposed globally in data breaches, and India accounted for a significant portion. If you’ve ever shopped online, your data might be stored on such platforms, making it vulnerable during a breach.
Purchase of Stolen Data on the Dark Web
Cybercriminals often buy and sell personal data on the dark web. After a breach, stolen information is packaged and sold to scammers at low prices.
- Cost of Data: In India, personal data such as email addresses and physical locations can be sold for as little as ₹500 per record.
- Accessibility: Scammers can buy hundreds of addresses in bulk, making it easy to target random individuals.
Publicly Available Information
Scammers can exploit publicly accessible information. Here’s how-
- Social Media Profiles: If you’ve shared your location or address on platforms like Instagram or Facebook, scammers can use it. For example, tagging your home location in a post makes it visible to anyone.
- Online Directories: Many businesses and individuals list their contact information on public directories, making them easy targets.
Phishing Scams
Sometimes, scammers trick individuals into giving away their own information. These tactics include-
- Fake Emails or Messages: You might receive a message claiming to be from a legitimate company, asking for your delivery address to “confirm” a purchase.
- Fake Surveys: Scammers often lure people into sharing their details by promising rewards or discounts in return for filling out online surveys.
Address Harvesting via Fake Purchases
This is a sneaky but effective method-
- Scammers make small, low-cost purchases on e-commerce sites using fake accounts.
- They input random addresses during checkout, which could include yours.
- These addresses are then used for brushing scams, and recipients often receive unsolicited packages.
Insider Leaks from Delivery Services
In some cases, scammers gain addresses through insiders working at delivery companies or courier services-
- Employees with access to shipping databases may sell customer information to fraudsters.
- This issue is especially prevalent in regions where regulations on data protection are weak.
Exploiting “Inadequate Data Privacy Laws”
India, despite its growing digital economy, faces challenges with data privacy enforcement.
- Before the implementation of the Digital Personal Data Protection Act, 2023, the country lacked stringent regulations on how companies handled customer data.
- Weak enforcement allowed businesses or their employees to share customer addresses with third parties, knowingly or unknowingly.
How can you protect your address?
Given the many ways scammers can obtain your address, here’s what you can do to safeguard your information-
- Avoid Oversharing: Refrain from posting personal details, such as your home address, on public platforms.
- Enable Privacy Settings: On social media, adjust your settings to make your profile visible only to trusted individuals.
- Be Cautious with Emails: Never click on suspicious links or share personal information via email or SMS.
- Monitor Account Activity: Regularly check your e-commerce accounts for unauthorized logins or changes.
- Stay Informed: Keep up to date with news about data breaches or phishing attempts to stay one step ahead of scammers.
Remember, protecting your personal information isn’t just a one-time task—it’s an ongoing effort in today’s digital world.
What to do if you’re targeted?
If you suspect you’ve fallen victim to a brushing scam, don’t panic. Follow these steps-
- Report the Package: Notify the e-commerce platform and explain the situation.
- Check your Accounts: Review your online shopping accounts for any unauthorized activity.
- Monitor your Credit Report: Keep an eye on your credit report for any signs of identity theft.
- Secure Your Data: Change passwords for your accounts and enable two-factor authentication.
- Stay Vigilant: Be cautious with online shopping and monitor your mailbox for suspicious deliveries.
How to Protect Yourself from the Brushing Scam in India?
Prevention is better than cure. Here’s how you can safeguard yourself-
- Shop Smartly: Stick to reputable e-commerce platforms with strong data protection policies.
- Use Strong Passwords: Avoid using easily guessable passwords and update them regularly.
- Avoid Public Wi-Fi: When shopping online, use a secure internet connection.
- Opt-Out of Data Sharing: Limit the personal information you share on websites.
- Stay Informed: Keep yourself updated on the latest scams to recognize and avoid them.
Why do Fraudsters use Brushing Scams?
You might wonder—what’s in it for the scammers? Here’s what they gain-
- Boosted Sales Rankings: Higher ratings and reviews increase product visibility.
- Increased Credibility: Glowing reviews make products appear reliable.
- Market Manipulation: They create an illusion of demand to attract real buyers.
The Bigger Picture: Impacts of the Brushing Scam in India
Brushing scams don’t just harm consumers; they affect the entire e-commerce ecosystem. Here’s how-
- Consumers Lose Trust: When buyers discover they’ve been misled by fake reviews, it erodes their trust in online platforms.
- Honest Sellers Suffer: Genuine sellers lose business as fake products dominate search results.
- Platforms Face Challenges: E-commerce platforms struggle to tackle fake accounts and reviews, affecting their reputation.
Final Thoughts
The Brushing Scam in India is a stark reminder of the darker side of e-commerce. While technology has made shopping convenient, it has also opened doors for fraudsters. By staying vigilant and taking the necessary precautions, you can protect yourself from falling victim to these deceptive practices.
The next time you receive a mysterious package, don’t ignore it. Remember, knowledge is power. Stay informed, secure your data, and shop smartly to enjoy the true benefits of online shopping!
FAQs About the Brushing Scam in India

Q1. What is Order Brushing?
Ans. Order brushing is a fraudulent practice used by sellers on e-commerce platforms to artificially boost their product ratings and sales. It involves sending packages to random individuals who never ordered them. Scammers create fake accounts, buy their own products, and use the recipient’s name to post glowing reviews online.
The goal? To manipulate product rankings and make low-quality or counterfeit items appear popular. For example, a poorly made gadget with fake five-star reviews might trick you into thinking it’s top-notch. This tactic, though sneaky, is becoming alarmingly common on platforms like Amazon and AliExpress.
Q2. Why do you receive a package that you didn’t order?
Ans. If you’ve received a package out of the blue, chances are it’s part of a brushing scam. Scammers use stolen or fake addresses to send unsolicited packages. Three main reasons are- Fake Reviews, Stolen Data, and Boost Sales. Receiving such a package can be frustrating, but it’s also a red flag that your data might be at risk.
Q3. Is there any act in the Indian Constitution to prevent Brushing Scams in India? What is the 419 Act in India?
Ans. Yes, India has laws to combat online fraud and misuse of personal data, but brushing scams falls into a grey area. Here’s what applies-
- The IT Act, 2000: This law addresses unauthorized use of personal data and cybercrimes. Scammers using stolen information can face penalties.
- Consumer Protection Act, 2019: Sellers engaging in unfair trade practices, like fake reviews, can be penalized under this act.
Q4. What about the 419 Act?
Ans. The term “419” comes from the Nigerian Penal Code and refers to advance-fee scams. While it isn’t directly related to brushing scams, the concept of fraud through deception is similar. In India, such activities fall under sections of the Indian Penal Code (IPC) that deal with cheating and fraud, such as Section 420.
India doesn’t yet have a specific law targeting brushing scams, but existing cybercrime laws provide a foundation for legal action.
Q5. How to stop brushing scams from Amazon?
Ans. Dealing with brushing scams can be tricky, but here’s how you can protect yourself-
- Report the Package
- Change your Account Passwords
- Monitor your Credit Report
- Do not keep the Package
- Be cautious about Sharing Data
Amazon and other e-commerce platforms are taking steps to crack down on brushing scams, but your vigilance is the first line of defense.
By staying alert and informed, you can outsmart fraudsters and keep your personal information safe. If something seems fishy, act fast!
The post Brushing Scam in India: How Fraudsters are Misleading Online Shoppers? appeared first on The Business Rule.