Scamming verified reviews is already a thing, it's called "Brushing."

https://en.wikipedia.org/wiki/Brushing_(e-commerce)

And that's taking advantage of another longstanding Amazon loophole.

Amazon does have the concept of "verified reviews", it is just not enforced.

They should definitely package a unique QR code for verified reviews in the delivered package.

Right before Christmas this year, my dad got a package of some iWatch bands he didn't order, and some other small accessories. It was addressed to him, from some random name he didn't recognize. He asked around all of his friends and family to see if anyone ordered pseudononymously. Presumably this was done in order for someone to be able to generate a fake "verified review" at the peak of Christmas shopping.

Indeed. Presumably many such IDs exist in Amazon's transaction system. It must be deliberate that they are not used for this purpose.

It also makes for a good honeypot.