A brush with online fraud: What are brushing scams and how do I stay safe?

Global e‑commerce is projected to exceed $6.4 trillion in 2025 while platforms are battling large-scale review fraud — Amazon reported proactively blocking over 275 million suspected fake reviews in 2024. The piece details "brushing" scams where sellers send unsolicited low-value parcels to validate addresses and post fake 5‑star reviews, a tactic that both exposes consumer data and can be a precursor to identity fraud or malware phishing. The practices erode trust in marketplace review systems and represent a reputational, operational and potential regulatory risk for marketplaces and brands, with implications for consumer behavior and platform oversight.

Analysis

Market structure: Brushing scams raise enforcement and trust costs that reallocate share toward large, well-capitalized marketplaces (AMZN) and third‑party security vendors. Expect a 6–18 month consolidation: small/low‑margin 3P sellers will see visibility and sales decline (estimate 5–12% category hit in high‑risk SKUs) while platforms that can credibly police reviews gain pricing power and can extract higher take rates or verification fees.

Risk assessment: Tail risks include a major data breach or coordinated regulatory crackdown (FTC/EC fines or mandated verification standards) that could impose multi‑hundred‑million to low‑billion compliance costs on marketplaces within 12–24 months. Immediate (days–weeks) risks are reputational headlines and transient share volatility; medium term (3–12 months) are higher CAPEX/OPEX for fraud detection, and long term (1–3 years) is structural monetization of trust services. Hidden dependencies: data broker ecosystem and ad algorithms amplify seller economics, raising CAC and distorting ROI across ad-dependent categories.

Trade implications: Favor long cybersecurity/identity and payments exposure (OKTA, CRWD, PYPL, V) over small/mid e‑commerce marketplaces (ETSY, selected MELI listings). Use options to express views: 6–9 month call spreads on identity/cyber names and 3–6 month put spreads on vulnerable marketplaces; size trades 1–3% of portfolio and time entries within the next 2–6 weeks ahead of Q4/earnings windows.

Contrarian angles: Consensus underestimates incumbents’ ability to monetize verification — paid “trusted buyer/seller” services could add $1–3bn incremental revenue to AMZN/PYPL over 24–36 months. Short‑term fear may be overdone; tighter rules raise barriers to entry and increase long‑term moat for large platforms, so nimble pairs (long AMZN vs short ETSY) capture that asymmetry.

Key Decisions for Investors

• Establish a 2–3% portfolio overweight in AMZN (ticker AMZN) over 6–12 months: rationale — enforcement strengthens moat; set tactical stop‑loss at -8% and take‑profit at +20% or upon 12–18 month monetization announcement.
• Initiate a 1.5–2% position in identity/cybersecurity via OKTA (OKTA) or CrowdStrike (CRWD) using 6–9 month call debit spreads sized to 1–2% notional (buy ATM call, sell 10–20% OTM) to capture rising demand for verification services.
• Put on a 1–2% bearish exposure to review‑dependent marketplaces (e.g., short ETSY via a 3–6 month put spread) anticipating 5–12% revenue downside in high‑risk categories; cover on regulatory clarity or if ETSY outperforms AMZN by >10% in 60 days.
• Rotate 3–5% of consumer/e‑commerce exposure into payments and fraud detection (buy PYPL and V) over the next 30 days to benefit from increased transaction verification demand; increase allocation if FTC/EC initiates formal rulemaking within 60 days.