Maybe a stupid question, but why would a “brushing scam” as you’ve described it require anything to actually be sent at all? Would it not be both easier and less obvious to just pretend they sent stuff without actually sending it? Or is it a matter of having the sites involved be able to see fulfilled tracking info?