Buyer and Seller Responsibilities Regarding Shipping

[ennui]

So, should we retape the box and return to sender? Preferably with garbage in the box?

Apparently it's more complicated than that.
Search says:

An empty package scam, often called a brushing scam, involves receiving unsolicited items to boost fake online reviews and potentially compromise your personal information.
How the Scam Works
In a brushing scam, scammers or third-party sellers send packages containing items you did not order. These items are usually inexpensive, lightweight, or even empty, and may appear to come from legitimate retailers like Amazon Federal Trade Commission+1. The goal is to make it seem as if you purchased the product, allowing scammers to post fake “verified” reviews in your name, which boosts the seller’s ratings and sales uspis.gov+1. Some packages may include QR codes that, if scanned, lead to phishing websites designed to steal personal information uspis.gov.

Risks Involved
Receiving an unsolicited package is not harmless. It indicates that your personal information—such as your name, address, and possibly email or phone number—has been obtained by scammers MoneyWise. This can lead to identity theft, credit fraud, phishing attacks, or unauthorized access to online accounts Federal Trade Commission+2. Even if the package contains a real item, the underlying intent is fraudulent.

What to Do if You Receive a Package​

• Do not contact the sender or scan any QR codes, as this may expose you to further scams USPS.com.
• Change passwords for all online shopping and financial accounts to prevent unauthorized access Federal Trade Commission+1.
• Monitor your credit reports regularly for signs of identity theft. You can check for free at AnnualCreditReport.com Federal Trade Commission.
• Report the package to the USPS Postal Inspection Service or your local consumer protection agency USPS.com.
• You are legally allowed to keep the merchandise, but remain cautious about any follow-up communications Better Business Bureau.