There’s something exciting about a package arriving on your doorstep. But what if you didn’t place an order and something just shows up? It’s not normal but should you really be concerned?

Yes, according to federal officials.

The Federal Trade Commission said scammers are sending people fake “luxury” items like rings, beauty products or even Bluetooth speakers. It’s part of what’s known as a “brushing scam,” because the scammers use the deliveries to “brush up” on their sales and write bogus reviews.

Here’s how it works:

Scammers or sellers of knock-off merchandise find your address or other personal information online then send you goods you never ordered and use your information to write a fake online review about their products using your name, giving them credibility and potentially boosting their sales.

Why does it matter if they write a fake review in your name? According to the FTC, if you got a package you didn’t order, it likely means someone has your personal information, making you more vulnerable to identity theft.

What you should do if you get an unexpected package:

• Change passwords on all your online shopping accounts in case they were compromised. If the package came from Amazon or another online marketplace, send the platform a message so they can investigate removing the seller.
• Check your credit weekly for free at AnnualCreditReport.com to monitor the information in your credit report and check for signs of identity theft.
• Don’t contact the sender. If you search online for the sender and reach out, anyone who responds will likely try to get more sensitive information from you to try to steal your money.

Got a package you didn’t order? Keep the merchandise and report fake reviews and scams to the FTC at ReportFraud.ftc.gov.