Free gift in the mail? It’s a scam

Picture this. You’re coming home after a long day and spot an Amazon box on the porch. Maybe the kids or parents sent an early Christmas present?

You open it up, and inside is a cheap pair of sunglasses or a plastic phone case. You think, “Strange. But free is free,” and toss it in a regifting pile.

🚩 That’s a red flag

You got hit with what’s called a brushing scam. Shady online sellers send little junk items to real addresses, so they can post fake “Verified Buyer” reviews under your name. It’s how they game the system.

But how did some scammer in another country get your home address?

A brushing package is not a quirky mistake. It’s a sign your information is floating around in the wrong places. Your name, address, email and who knows what else likely came from a data breach. And if they have your address, odds are good they also have your password from that same breach.

Btw, you get to keep anything sent to you for free. It’s a good idea to alert the online retailer that you got the box, though.

😨 Credential stuffing is next

While you’re wrapping presents, hackers are running bots that take your leaked email and password and try them on every site they can think of. Amazon. Netflix. Your bank. Your airline mileage accounts. 

They’re counting on you using the same password or one that is easily guessed everywhere, like most people do. To make it through the season without a hacked account, here’s the rule to live by: Never reuse a password. Every site gets a unique long password.

And yes, I hear you. “Kim, I can’t remember 50 strong passwords with 15 or more characters, numbers and symbols.” You’re not supposed to. That’s what a password manager does, and a lot more. You really should be using one. 

NordPass, the official password manager sponsor of my show, constantly checks the dark web for new breaches. If your email or other personal data shows up, you get an alert right away. This way, you’re not a sitting duck.

Here’s another reason to use a password manager. Say someone visiting wants your Netflix log-in. NordPass lets you share access securely without exposing your password. It’s a nifty feature.

NordPass stores your payment info and autofills it instantly. This way, you beat the bots to the deals and avoid typing anything that a keylogger could steal. This also stops having your credit card details stored in your browser for anyone to grab.

✅ Right now, save 68% and get NordPass for only $0.95 per month, plus get 4 extra months using my radio link.

Tags: Amazon, deals, hackers, home, reviews