A couple of weeks ago just before the storming of the US Capitol, I discover a breach in my personal finances; someone had gotten my VISA card information and was using it to make some very odd purchases. So I called my bank and submitted a fraud claim. The amounts weren’t large and the five purchases totaled about $1,100. My bank credited me with the amounts and I went on to change my passwords and login information. When my new credit card arrive two days later, I thought I could close that chapter and move on to brighter things.
Life continued on as normal – at least pandemic normal – until I received a package last Thursday via FedEx that I didn’t order. I called the vendor whose information was on the packing slip to see who placed the order and was given a name I’d never heard of, an email address that didn’t match it and when I asked for the last four digits of the credit card, was relieved it didn’t match mine – old or new. The customer service rep didn’t seem to concerned about the error – as far as she was concerned, it had been paid for and delivered as ordered- regardless of whether any of the information matched.
I thought it was just a fluke until the next day when I received three more packages I didn’t order; one each from the USPS, FedEx and UPS. I called the vendor on the first one I received that day, a John Cena action figure, and was again given an unknown buyer’s name and last four of a Mastercard. By the time we discovered the other two on our front porch, it was too late in the day to make calls and I was really beginning to feel creeped out. Why was I receiving this stuff? It was weird stuff too – along with John Cena, I received a package of 50 unassembled small shipping boxes, a Fiskar’s demolition tool and a fancy wrench – nothing I would ever want or use – not to mention their sheer presence gave me the willies!
In the wee hours of the next morning – the time when I seem to wake up and try to figure stuff out – I decided to contact local law enforcement for some advice. One of the perks of living in a small town is that if you are involved in community activities, you actually become acquainted with local officials. So, I called the one I was most acquainted with, our county Commonwealth’s Attorney.
I decided to go ahead and send an email Saturday morning in the hopes of being at the top of his queue on Monday morning. To my surprise, I heard back from him within an hour. He gave some insight into what might be happening and some guidance into what steps I should take. His best guess was that I was being used as a part of a scam called “Brushing” where vendors pay folks to write reviews for products purchased online. Somehow they make a purchase that creates a shipping label so they can claim their review is on a “verified purchase.” The goods shipped out generally are not those being reviewed and they are sent to random people, like me, whose mailing information they can easily obtain from a phone book or other public sources. He advised me to change all my logins and passwords, file a fraud claim with the credit reporting companies and call the sheriff’s office to file a police report.
I did all these things and even called the US Postal Investigative Services to file a fraud claim on the suggested of the Deputy Sheriff I spoke to. Although the person I spoke to was very sympathetic, there was really nothing to go on. She did take all my information and started a report.
With all my tasks completed, I began to do a bit of online research into Brushing. Apparently it’s been going on for a while. Most authorities agree that there is little risk to people like me who have received these packages and I am under no obligation to pay for any of the items but I just can’t help but wonder if this is somehow connected to my credit card breech.
Yesterday afternoon UPS attempted to deliver a package from some racing supply company. I’d been alerted to it’s arrival by my UPS account so I knew it wasn’t anything I’d ordered. I was able to catch the driver before he jumped into his truck and asked him to take the box away. He said sure, took it away and I felt a little better.
I don’t know how much longer I’ll have to stay hyper-vigilant in monitoring my accounts, probably forever. Bad people are everywhere and as long as I continue to have an online presence, I suppose I will be vulnerable. The worst part of this experience has been in how it’s shaken my feeling of security – that and the quandary of what to do with the pile of stuff I didn’t order. Just having it here is a reminder of my vulnerability. I hate that the most.