Scammers are sending packages to unsuspecting recipients as part of schemes to boost online reviews or steal personal information via what’s called a “brushing scam,” according to warnings from multiple agencies.

Recent posts from the Federal Trade Commission (FTC) and the New York State Sheriffs’ Association outlined two types of brushing scams:

Review Builders: Scammers send a package with an inexpensive item and use that mailing as “validation” of delivery, according to the FTC. This allows the scammers to post a glowingly positive online review – possibly in the recipient’s name – on some commerce sites, which can make their products more attractive, both to buyers and to a sales site’s algorithm.

Phishing Packages: Scammers send a package in a similar fashion, only they include a note with a QR code or a web link offering more details about the sender or the product, or options for processing a return. Scanning the code or typing in the link sends the recipient to what appears to be a shipper’s homepage or a product information website, but is really a front to collect credit card information, passwords, or other personal data.

[RELATED: Scam and Fraud Prevention Resources From MOAA]

Recipients of unexpected packages can take these steps to steer clear of scams:

• Check accounts at Amazon or other online outlets for fraudulent purchases.
  
  
• Change passwords for any accounts that may have been compromised.
  
  
• Do not scan any QR codes on or inside the package, and don’t visit any unknown sites (or call any phone numbers) offered to process returns. If the material is from a trusted sender, go directly to their official website or app to investigate.
  
  
• Remember: Companies aren’t allowed to demand the return of, or payment for, unsolicited merchandise. Learn more about your rights at FTC.gov.

[MORE FROM MOAA: ‘The Crimes That Keep Taking’]

Consumer fraud of all types can be reported via the FTC’s website.