Short answer
On second-hand marketplaces the most common scam targets sellers: a “buyer” moves the chat to WhatsApp, email or SMS and sends a link to “confirm the payment” or “receive your money”. The page copies the marketplace and asks for your card details, which are never needed to receive money. Vinted says you don’t have to leave Vinted to confirm a payment or receive an order; Kleinanzeigen says to pay through its Sicher bezahlen escrow or PayPal “goods and services”, and never by Western Union, Paysafe or cash in an envelope. Buyers face fake sellers who ask for a transfer or PayPal “friends and family”, which has no buyer protection. Keep every message and payment inside the app; if you typed card details, call your bank now.
The tricks, and who they target
| Trick | Target | What really happens | Safe response |
|---|---|---|---|
| “Payment received, click to confirm” | Seller | A copied payment page collects card or PayPal login details | Never enter card details to receive money; check the order in the app |
| “Payment failed, scan this QR code” | Seller | The code opens a fake site (quishing) | Don’t scan codes sent by buyers |
| Triangle fraud | Seller | The money comes from a hacked account and is reversed after you ship | Use the platform’s payment; ship only when the payment is final |
| Shipping-cost or courier trap | Seller | You are asked to advance courier fees that never come back | Never pay anything in advance to sell |
| False buyer-protection claim | Seller | The buyer claims the parcel was empty or wrong | Film the packing, ideally with a witness |
| PayPal “friends and family”, Western Union | Buyer | No buyer protection; transfers are practically irreversible | Pay only through the platform or PayPal “goods and services” |
| Changed bank details in the chat or profile | Buyer | Your transfer goes to the criminal, not the seller | Check the details carefully, or don’t pay by transfer |
Why you never need card details to receive money
Receiving money never requires your card number, expiry date and security code. A page that asks for them “so the payment can be released” is collecting what it needs to spend from your card. Vinted handles payments through its payment service provider when the buyer uses Buy now, says payment details aren’t shared with the seller, and states that you don’t have to leave Vinted to confirm a payment or receive an order. Kleinanzeigen’s Sicher bezahlen is an escrow service run with its payment partner; the Verbraucherzentrale warns that criminals copy exactly that name for fake pages.
The platform rules worth knowing
- Vinted: stay on Vinted throughout an order, buy with the Buy now button, and forward phishing emails to phishing@vinted.com.
- Kleinanzeigen: use Sicher bezahlen or PayPal “goods and services”; never Western Union, Paysafe, MoneyGram or cash in an envelope. Forward fake emails to spoof@kleinanzeigen.de, meet in busy places, and take someone along for larger amounts.
- Leboncoin, Wallapop, Subito, OLX: they also offer payment and shipping inside the app. The same rule applies everywhere: if a message takes you out of the official app, stop.
- Any platform: report the profile, so the next seller isn’t targeted.
If you fell for it
- You typed card details: call your bank on the number on your card and block the card. Charges you didn’t approve can be disputed; payments you approved yourself are much harder to reverse.
- You typed a PayPal or marketplace password: change it from the official app, turn on two-factor authentication and check for changed email, bank details or listings.
- You shipped to a “buyer” whose payment was reversed: keep the shipping receipt and report it to the police.
- Report the profile to the platform, and save screenshots of chats, emails and transactions; the Verbraucherzentrale advises documenting everything.
- File a police report, in Germany for example through the online police station; see where to report online fraud by country.
If criminals took over your marketplace or email account and are using it to scam others, secure it first: see hacked account recovery.
A safe-selling checklist
- Keep chat, payment and shipping inside the app.
- Ignore any link, QR code or “payment confirmation” sent by a buyer.
- Ship only when the platform shows the order as paid.
- Never pay courier fees, “insurance” or “verification” to sell something.
- For handovers, meet in a public place; for buyers, cash at handover is the safest option the Verbraucherzentrale names.
- Never share a code you receive by text: see the verification code scam, and for codes on paper, QR code scams.
Frequently asked questions
A buyer says my payment is waiting and I must click to accept it. Is that real?
No. On Vinted, Kleinanzeigen and similar platforms you don’t accept money through an outside link. Open the official app: if the order isn’t shown as paid there, there is no payment.
Can my bank reverse the payment?
Ask straight away. Card charges you didn’t authorise can be disputed; transfers and PayPal “friends and family” payments you made yourself are usually very hard to get back.
Is meeting in person safer?
For buyers, the Verbraucherzentrale names a personal handover with cash as the safest option. Meet in a busy place and, as Kleinanzeigen advises, take someone along for larger amounts.
Scammers are using my hacked marketplace account. What now?
Reset the password from the official app or website, turn on two-factor authentication, remove listings you didn’t create, and tell the platform so it can warn the people who were contacted.
Sources: Vinted Help — how to avoid and report phishing messages and scams, Kleinanzeigen — safety tips, Verbraucherzentrale — fraud on classified-ad platforms