Marketplace payment scams: fake buyers and courier links
You are selling an item, but the supposed buyer directs you to enter card details or sign in to your bank. Under the pretext of receiving payment, they try to gain access to your money.
What is happening?
Choose the most serious step that has already happened. After sharing banking credentials or card details, do not wait for a loss to appear.
Only a message or opened link
You entered nothing and approved nothing.
View the steps →Payment card details entered
You entered the card number, expiry date or CVV/CVC.
View the steps →Bank sign-in or approval
You entered sign-in details or a code, or approved an action.
View the steps →Money has already left
You see an unfamiliar transaction or paid a supposed fee.
View the steps →Sellers can be targeted too
The offender pretends to buy your item but actually wants your banking credentials or card details. Potential losses may exceed the price of the item you are selling.
From an interested buyer to a fake payment page
Messages vary. Focus on what the other person asks you to do.
Reply to your listing
The supposed buyer shows interest and offers to arrange everything.
Hassle-free delivery
They claim to have booked a courier or paid through a delivery company.
Link, email or QR code
You are told to open a page to “collect” the money or confirm the sale.
Form requesting sensitive details
An imitation service asks for your card, sign-in details or a security code.
Further approval
A prompt appears in your banking app or by text. The scammer tells you to approve it.
Misuse of your details
An unauthorised payment or loss of account access may follow.
When to stop the transaction
Card details to receive money
The buyer asks for your card number, CVV/CVC, PIN or bank credentials.
Collecting payment through a link
The message takes you to an imitation courier or marketplace website.
Pressure to act quickly
They claim the link will expire, the courier is waiting or a cancellation fee is due.
Moving off the platform
A buyer wants you to leave the marketplace app and continue by email or another chat.
QR code to confirm a sale
The code may lead to a fake page. Scanning does not prove payment.
Only an image of a receipt
A buyer’s screenshot or email cannot replace checking the received payment yourself.
Normal procedures and fraudulent pretexts
Distinguish a bank transfer, genuine cash on delivery and payment within a platform.
Normal procedure
- For a bank transfer, share only the required recipient account details and check the credit in your own banking service.
- Check marketplace orders in the official app or on a website you opened independently.
- For genuine cash on delivery, the courier collects payment on delivery and settles it under the service’s terms.
Suspicious request
- Enter your card or banking password to receive money.
- Approve a payment or new device — supposedly just to verify receipt.
- Pay a fee or use an “escrow” page sent by the buyer.
“I’ll arrange the courier — just collect your money”
An illustrative example explaining the method, not a transcript of an actual case.
What to do immediately
I only opened the link
- Close the page. Enter nothing and approve nothing.
- Keep the message and link address without reopening the site. Report the profile to the platform.
- If you entered nothing and approved nothing, merely opening a link does not authorise a bank transaction. If in doubt, check your account independently.
I entered my card details
- Block your card immediately through your bank’s official app or phone number.
- Tell the bank what you entered and check suspicious and pending transactions.
- Do not wait for money to leave. Do not approve further requests or share codes.
I entered bank credentials or approved something
- Contact your bank immediately through an official channel.
- Explain whether you shared a password or text code, signed in, added a device or approved a payment.
- Ask the bank to secure access and review transactions. Changing a password alone may not address an action you already approved.
Money has already left
- Give the bank the amount, time and recipient; ask whether the payment can be stopped or recovered.
- Keep evidence and contact your local police. Do not send more money.
Check before sending the item
What to keep
Listing and profile
URL, listing ID, the other person’s profile and contact details.
The full conversation
Messages, emails, links and a timeline.
Payment transactions
Amount, time, recipient and transaction confirmation or ID.
Report the profile to the marketplace. Report misuse of a courier’s name to its official support. If money is lost, contact your bank and police; a report to DPP does not replace either.
Marketplace payments — FAQ
What account details does a buyer need?
For an ordinary bank transfer, only the required recipient account details, such as your name and IBAN. A buyer does not need your card number, CVV/CVC, PIN, password or authorisation code.
Can a courier pay out cash on delivery?
Yes, genuine cash on delivery has defined settlement procedures. That does not justify a buyer asking you to enter card details through a link to “collect payment”.
Is a QR code safer than a link?
A QR code can contain a link to a fraudulent website. It is neither confirmation that money arrived nor proof that the service is genuine.
Why is a payment screenshot not enough?
Receipts can be forged. Check the status in your own banking service or the platform’s official system.
Should I call my bank if no money has left?
Yes, if you entered card details or bank credentials, or approved something suspicious. The bank can address misuse before further losses occur.
Will I get my money back?
Ask your bank to review the specific transaction and available remedies. Recovery cannot be guaranteed in advance.
Sources and context
These references accompany the Czech original and mainly describe Czech services. They remain useful examples of the same scam. Source links are in Czech; verify the rules of the provider you actually use.
Received a suspicious message or fake link?
Keep the information and report your suspicions. If you have already shared banking credentials or card details, contact your bank first. DPP’s reporting form is currently in Czech.
Report your suspicions to DPP (Czech)