If you’re seeing strange versions of your address on marketplace orders—extra characters, odd apartment numbers, or unfamiliar email variations—don’t brush it off. These “address aliases” are a common tool in reshipping scams, where criminals funnel stolen goods through your address to blur the trail and test stolen payment methods. This guide explains how reshipping scams work, the specific alias patterns to watch for, how to verify what’s happening, and the exact steps to stop it and protect your identity.
What Is a Reshipping Scam and Why Use Address Aliases?
In a reshipping scam, a fraudster buys items with stolen credit cards or compromised marketplace accounts, ships them to an intermediary address, then forwards the goods overseas or to another drop point. Using your name and a manipulated version of your address helps:
- Bypass fraud filters: Small address changes can defeat duplicate-order checks while still delivering to the same place.
- Mask stolen payments: The delivery trail looks legitimate, making chargebacks and investigations harder.
- Test stolen data: Fraudsters send low-cost items first (“test buys”) before larger purchases.
Common Address Alias Patterns That Signal Trouble
Watch for these manipulations in marketplace order history, shipping labels, email confirmations, and saved addresses in your accounts:
1) Punctuation and Spacing Variants
- Extra spaces or dots: “123 Main St” becomes “123 Main St” or “123 Main St.”
- Repeated or swapped abbreviations: “Ave” vs. “Av” vs. “Avenue.”
- Hyphen insertions: “Apt 4B” becomes “Apt-4B.”
2) Fake Apartment, Suite, or Unit Numbers
- Nonexistent unit numbers added: “Apt 4B” becomes “Apt 4B-2” or “Unit 99.”
- “Floor,” “Suite,” or “Dept” added to single-family homes.
- Mailbox-style tags: “#,” “Box,” “Rm,” or “C/O” used without reason.
3) Purposeful Misspellings and Rearrangements
- Street or city misspelled: “Mian St,” “Sprngfld.”
- Order of elements changed: “Main St 123 Apt 4B.”
- Phonetic variants: “Road” vs. “Rd,” “Highway” vs. “Hwy.”
4) Email and Name Aliases Linked to the Address
- Email plus-addressing: “name+shop@domain.com” appears in order records you didn’t create.
- Lookalike emails: “jane.doe1@” or “janed0e@” tied to your name and address.
- Middle initials, nicknames, or reversed names you don’t use: “J. A. Doe,” “Doe Jane.”
5) Carrier-Compatible “Deliverability Tricks”
- Landmark add-ons: “Leave at back door,” “Gate code,” you didn’t set.
- Instruction-only lines added as a separate “suite.”
- Alternate ZIP+4 that still resolves to your block.
6) Marketplace-Specific “Save Address” Quirks
- Multiple similar saved addresses differing by one character.
- Delivery preferences you never configured (locker pickup, business hours).
- Gift options enabled by default for your address.
How Scammers Exploit Marketplaces and Forwarders
Fraudsters mix address aliases with additional techniques:
- Package mules: Unwitting people paid to receive and forward packages, often recruited from job boards. Your address may be added without your consent if your details were scraped or guessed.
- Mail forwarding abuse: Unauthorized USPS or private-forwarder changes create alternate routing paths.
- Synthetic identity blends: Real address + altered name + new email to dodge detection.
- Gift orders and “ship to a friend”: The buyer and recipient info are different; the recipient may be you.
Quick Triage: Are You Dealing With a Reshipping Scam?
Use this checklist to assess risk:
- Unexpected packages? Items arrive you didn’t order, even low-value goods.
- Odd address entries? Saved addresses or past orders show variants you never created.
- Account alerts? Password-change emails, login notifications, or order confirmations you don’t recognize.
- Payment anomalies? New cards added to your marketplace wallet or gift card balances used without consent.
- Forwarding requests? USPS or carrier change-of-address or hold-mail notices you didn’t submit.
Verify What’s Happening Without Helping the Scammer
Do the following before interacting with any unexpected packages:
- Check your marketplace accounts: Review order history, saved addresses, gift registries, payment methods, and authorized devices.
- Look up tracking numbers: Use carrier websites to see who created the label and the ship-from source.
- Search your email: Find new account signups or receipts using your name but different emails.
- Check USPS Informed Delivery (U.S.): Confirm if mail scans show unfamiliar sender patterns.
- Call the seller or marketplace via official channels: Ask if orders are gift purchases or linked to your account. Do not use phone numbers or links printed on suspicious inserts.
Address Alias Examples That Usually Mean Fraud
- “123 Main St Apt 4B-Front Door,” when your building has no “front door” option.
- “C/O John,” using your last name with a stranger’s first name.
- “123 Main St Suite 900,” but you live in a house.
- ZIP+4 appended you never use, with an extra “#” unit.
- Multiple deliveries labeled “Attn: Returns” or “Dept Logistics.”
Immediate Steps to Shut It Down
Move quickly—reshipping activity often ramps up once a test package is delivered.
- Secure your marketplace and retailer accounts:
- Change passwords to unique, strong passphrases.
- Turn on multi-factor authentication (app-based if possible).
- Remove unknown addresses, devices, and payment methods.
- Disable one-click checkout and auto-ship temporarily.
- Contact the marketplace and merchants’ fraud teams:
- Report unauthorized orders and address tampering.
- Ask for a full export of addresses, logins, and orders in the last 90 days.
- Request a security review and account note flagging potential reshipping abuse.
- Handle unexpected packages safely:
- Do not reship, forward, or return items using instructions from inserts or emails you didn’t initiate.
- Contact the retailer’s official support for return guidance; document tracking and photos.
- If items are clearly illicit or high-value, contact local law enforcement’s non-emergency line for guidance.
- Lock down postal and carrier controls:
- Set up or review USPS/royal mail/Canada Post accounts to block unauthorized forwarding.
- Remove unknown forwarding addresses; set notifications for changes.
- Add a verbal password or PIN if the service supports it.
- Monitor identity and credit signals:
- Watch for new credit inquiries, new accounts, or address changes with lenders.
- Enable credit and identity alerts to catch linked fraud activity early.
How Address Aliases Are Created in Your Accounts
Fraudsters don’t always hack your password. Common entry points include:
- Credential stuffing: Reusing a password from another breach lets attackers log in and modify saved addresses.
- Phishing and fake support chats: Fraudsters capture login codes and add an address while “helping.”
- Guest checkout spoofing: They order using your name and address with a new email, then create an account later to repeat the trick.
- Shared-family address books: A linked household account adds a “convenient” alias you didn’t notice.
- Compromised browser autofill: Malware steals stored addresses and payment profiles.
Preventive Settings and Habits That Actually Work
- Use a password manager: Unique passwords and stored security answers reduce account takeovers.
- App-based MFA everywhere: Prefer authenticator apps or security keys over SMS when possible.
- Review saved addresses quarterly: Delete duplicates, fake units, and anything you don’t recognize.
- Separate shopping emails: Create a dedicated email for marketplace accounts; disable auto-forwarding rules.
- Turn on purchase and login alerts: Email, SMS, and app alerts for new devices, payments, or addresses.
- Freeze or lock credit when not actively applying: It prevents new accounts opened with your data.
- Opt out of data brokers: Reduces easy access to your address variations and past residences.
What to Tell Customer Support So They’ll Act
When contacting marketplaces or retailers, be specific and concise:
- “I am receiving unauthorized orders and seeing multiple address variants tied to my profile.”
- “Please remove all addresses except this exact format: [your correct address]. Lock my address book.”
- “Export and email a full log of address changes, device logins, gift orders, and wallet changes for the past 180 days.”
- “Flag my account for reshipping fraud review and require MFA for address or payment edits.”
- “Confirm refund reversals for fraudulent orders and prevent label creation to any variant of my address.”
Document Everything
Keep a simple record. It helps with chargebacks, police reports, and support escalation:
- Photos of labels showing the alias, dates, and tracking numbers.
- Emails and chat transcripts with marketplaces and carriers.
- List of addresses removed, devices deauthorized, and passwords changed.
- Incident timeline: first package received, first alert, actions taken.
When to Involve Banks, Carriers, and Law Enforcement
- Banks/credit cards: If your cards were used or added to a wallet you control, dispute charges and request new cards. Ask for address-change holds.
- Carriers/postal services: If a forwarding order or delivery instruction appears you didn’t set, file a fraud report and remove it.
- Law enforcement: Report if expensive items or repeated deliveries continue, or if you’re being pressured to reship. Provide your documentation packet.
Identity and Credit Monitoring Helps Catch Linked Fraud
Reshipping scams often overlap with broader identity misuse: new credit applications, change-of-address attempts, or synthetic identities using your details. Continuous monitoring can surface these signals early so you can freeze credit, dispute activity, and prevent escalation. If you want a single place to track credit changes and identity alerts, consider a dedicated monitoring tool that consolidates notifications and gives you fast dispute options. Learn more about monitoring your credit and identity activity here.
FAQ
Is this the same as “brushing” scams?
No. Brushing scams send low-value items to create fake reviews. Reshipping scams route stolen goods through your address, often tied to stolen payments and potential identity misuse.
Should I refuse delivery?
If you catch it at the door, you can decline. If it arrives, contact the retailer using official support and ask for a prepaid return arranged by them. Don’t use instructions inside the box unless verified.
Will my address be blacklisted?
Retailers can flag high-risk addresses, but working with support and documenting the fraud generally prevents negative marks against you.
Do I need a credit freeze?
It’s a strong precaution if you see other identity-theft indicators (new accounts, inquiries, or address changes). You can lift freezes temporarily when needed.
Practical Checklist
- Change passwords and enable MFA on all shopping accounts.
- Purge unknown saved addresses and lock down delivery settings.
- Stop and document unexpected packages; contact official support.
- Check USPS/other carriers for unauthorized forwarding.
- Audit bank/credit accounts; enable transaction alerts and consider a freeze.
- Enable identity and credit monitoring for early warning signs.
Conclusion
Address aliases are a quiet but clear signal that someone may be using your name and home as a pass-through for fraud. Spotting the patterns—fake units, punctuation tweaks, unexplained delivery instructions—lets you act before criminals scale up. Secure your accounts, remove rogue addresses, coordinate with retailers and carriers, and monitor your identity for related activity. With quick, methodical steps and ongoing alerts, you can shut down reshipping attempts and prevent larger identity harm.
Good to Know
Packages you didn’t order are not “free stuff”—they’re often proof your identity is being tested or used as a pass-through. Reporting and locking down accounts quickly can stop larger fraud in your name.