It may be a brushing scam. A seller ships an inexpensive item to a real address so it can post a fake review tied to a supposedly verified purchase.
Does it mean your payment card was used?
Not necessarily, but the sender obtained your name and address. Check your shopping accounts and payment activity, change reused passwords, and report the shipment to the marketplace.
Do not use contact information inside the package
Go directly to the retailer’s official site or app. Unexpected QR codes, return labels, and “claim your prize” instructions can lead to a second scam.
This page provides general security guidance, not a guarantee that any individual message is safe. When money, passwords, remote access, or sensitive records are involved, verify through a separate trusted channel.