Received a package you didn’t order? FTC says it could be a scam