Remote Scam Watch — August 24, 2026
Two FTC-confirmed scams active nationwide this week — packages you didn't order used to steal your identity, and fake bill payment websites draining your bank account. Free to read, no subscription required.
That Random Package You Didn't Order Is a Scam — And It May Mean Someone Already Has Your Personal Information
In a brushing scam, someone creates a fake seller account on a marketplace platform and ships you a cheap, lightweight item using your name and address. They then use your name to post a glowing five-star review for the product — appearing to be a "verified buyer" because a package was actually delivered to your address. The goal is to boost the product's ratings with fake verified reviews, either to increase sales of a fraudulent product or to prepare the listing for a bait-and-switch where the product is later changed.
The FTC notes that recent reports show the packages typically contain something inexpensive and random: baby wipes, seeds, face masks, cheap electronics accessories. You didn't order it and you didn't pay for it — but your name is on the label, which means the sender had your name and delivery address. How did they get it? Usually from data breaches, purchased data lists, or from scraping public records. In some cases it's a test to confirm your address is active before the same information is used in a more damaging way.
- A package arrives at your address that you have no memory of ordering — particularly if it's from an unfamiliar sender or has a non-standard return address
- The item inside is random, cheap, or unrelated to anything you would typically order (seeds, baby wipes, phone cases, cheap jewelry)
- You later see a review posted in your name on Amazon or another marketplace for a product you don't recognize
- Shortly after the package, you start receiving unusual marketing emails, or notice new accounts opened in your name
- Do not assume it is a gift or a mistake and ignore it. An unsolicited package is a signal, not a coincidence.
- Report it to the FTC at ReportFraud.ftc.gov — include the sender's name, the platform name if shown on the label (Amazon, Walmart, etc.), and what was inside.
- Report it to the marketplace directly. Amazon, Walmart, and other major platforms have processes for reporting brushing. Look for "Report suspicious activity" in your account settings or contact customer service.
- Check your credit report immediately at AnnualCreditReport.com — all three bureaus (Equifax, Experian, TransUnion) are free and available weekly. Look for accounts or inquiries you don't recognize.
- Change passwords on key accounts if you suspect your personal data was part of a breach — particularly email, banking, and any marketplace accounts where your address is stored.
- Consider placing a fraud alert or credit freeze if you see suspicious activity on your credit report. A freeze is free and prevents new credit from being opened in your name.
- Keep the package — don't throw it away before reporting. The shipping label, sender info, and contents may be useful for the FTC and marketplace investigations.
An unexpected package is a red flag, not a windfall. Report it to the FTC and check your credit report immediately — the package itself may be cheap and harmless, but what it signals about your exposed personal data is not.
Searching Online to Pay a Utility Bill? Scam Sites Are Appearing at the Top of Results — And Taking Your Payment Without Paying the Bill
Most people search online for everything — including how to pay a bill. Scammers have spotted this habit and built convincing fake payment pages for electric companies, gas companies, water utilities, phone carriers, and other services people routinely search for online. They either pay for search engine ads that appear at the top of results (making them look official) or use SEO techniques to rank high in organic results. The fake sites are designed to look legitimate, with matching logos, color schemes, and payment form layouts.
When you enter your account number, bank details, or credit card number, the site either keeps your payment and vanishes, or in some cases processes a partial payment to maintain the illusion while pocketing a fee. Your actual utility bill remains unpaid. The FTC notes this scam is particularly effective because victims often don't realize they've been scammed until they receive a past-due notice or a shutoff warning — sometimes weeks later.
- The payment site appeared in your search results rather than being bookmarked or typed directly — especially if it was in the "Sponsored" or ad section at the top
- The URL in your browser doesn't exactly match your utility's official website — look for extra words, misspellings, or a different domain ending (e.g., .net or .co instead of .com)
- The site asks for payment methods your utility company doesn't normally accept, or charges an unusually large "convenience fee"
- You receive a shutoff notice or past-due statement from your utility after you believed you paid
- Never use a search engine result to navigate to a bill payment page. Type your utility company's official web address directly into your browser, use a bookmark you've saved yourself, or find the website address printed on your paper bill.
- Look for the "Sponsored" label on search results — ads appear at the very top of Google results with a small "Sponsored" tag. Scammers pay for these spots. A sponsored result is not a verification of legitimacy.
- Check the URL carefully before entering any payment information. Your utility's real website will be the exact official address — no extra words or subdomains before the main domain name.
- If you think you paid a fake site, contact your bank or card issuer immediately to dispute the charge and monitor for further unauthorized transactions. Then pay your actual utility directly through its verified official website or by phone.
- Report the fake site to the FTC at ReportFraud.ftc.gov and to Google (or whichever search engine served the result) using their "Report" function next to the ad or result.
- Save your payment confirmation for every bill you pay online — a legitimate utility will send a confirmation email or show a confirmation number. If you didn't get one, check whether the payment actually went through on your account.
Never search for a bill payment page — type the official website address directly into your browser. A search result at the top of the page is not proof it's real. Your paper bill has the correct website address printed on it.