Scams in online second-hand stores

Popular online second-hand stores are convenient places for criminals to seek people’s personal data and funds, as unsuspecting sellers are often happy to find a buyer for their product. However, be careful not to fall into a trap sprung by skilful scammers.

A scammer posing as a buyer – this is how a typical scam goes in an online second-hand store

  1. A buyer shows up in an online second-hand store, showing interest in a product you’re selling. They offer you a new easy way to receive a payment or deliver the product using courier services.
  2. The buyer may try to exchange messages with you in channels outside the store, including WhatsApp and email. Sometimes, messages can also be exchanged in the store’s chat field.
  3. The buyer sends you a link, through which you should confirm your card details to receive the payment or set up the delivery of your product.
  4. The link actually leads to a scam website, which resembles the site of a bank or courier service. If you enter your card details and user ID on the website, the scammer posing as a buyer will have access to them.
  5. When the scammer has your card details and user ID, they will attempt to use them to make payments and take over your Mobile key. The scammer may also apply for loans in your name.

Alternatively, the scammer posing as a buyer may send you a link and ask you to install a courier service app or similar through it. In reality, malware is downloaded, which the scammer uses to take over your device.

Tips for safe buying and selling in online second-hand stores

  • When you sell products in an online second-hand store, remember to read the service’s terms and conditions and check how the service works.
  • Remember that you don’t need to confirm incoming payments. In other words, the seller never needs to provide any information other than their account and/or phone number to complete a sale.
  • Take care of all sales from start to finish using the store’s own app or website.
  • Read any warnings issued by the store app carefully if you have, for example, clicked a link received by a message and you’re about to be forwarded to a third-party website. This may be a warning sign to indicate that this is not how the service works.
  • Consider using an alias from which your email address or full name can’t be determined. In this way scammers can’t directly contact you by email, for example.