goJumboGPT

Security Scams that go straight for your money

Marketplace and ticket scams: buying from a stranger safely

How scams on classified sites and ticket resale work in both directions, which payment methods protect you, and the meeting rules that prevent most problems.

8 min read How we write

The short answer

  • Pay with a method that can be disputed and keep the whole deal on the platform, because those two habits defeat most marketplace scams on their own.
  • A request to move to a messaging app or to pay by transfer is not a fee saving, it is the removal of your recourse.
  • Sellers are targeted as often as buyers, usually with a forged payment confirmation or a link that asks for card details in order to pay you.
  • A screenshot or PDF of a ticket can be sold to ten people, so insist on a transfer inside the official ticketing account.
  • Inspect the item before money changes hands, and meet in a busy public place in daylight.
  • If it goes wrong, call the bank first, screenshot everything second, and report to the platform and the national fraud body after that.

Buying from a stranger is manageable when two things hold: the money moves by a method that can be disputed, and the deal stays on the platform where it started. Almost every marketplace and ticket scam attacks one of those two conditions. The seller who wants a bank transfer, the buyer who moves you to a messaging app, the ticket holder who insists on a friends and family payment: all of them are asking for money with no route back.

The payment method decides the outcome

Decide how you will pay before you agree a price. That one choice sets how much you can recover later.

How you payWhat protection existsRealistic chance of recovery
Credit cardChargeback rights, plus joint liability with the seller in the UK above a thresholdGood, and the strongest option for a remote purchase
Debit cardChargeback through the card scheme, but no joint liability and the money has already leftModerate, and slower
Platform checkout with buyer protectionThe platform holds the payment and runs a dispute processGood, if you paid inside the platform
Wallet app, goods and services optionPurchase protection with evidence rules and time limitsGood for items, patchy for event tickets
Wallet app, friends and family optionNone, because you declared it was not a purchaseClose to zero
Bank transfer or instant payment appFraud reimbursement rules in some countries, no purchase protection anywhereDepends entirely on your country
Cryptocurrency or gift card codesNone by designNone

That last set of rows varies most by country. In the UK, banks operate a mandatory reimbursement scheme for authorized push payment fraud, subject to caps, an excess and an expectation that you were not grossly careless. In the EU, banks are rolling out payee name checking on euro transfers, which flags a mismatch between the name you typed and the name on the account, though it cannot help when the account genuinely belongs to the person you are dealing with. In the US there is no equivalent general scheme, and a transfer you authorized yourself is treated as your decision. A card keeps a dispute route open almost everywhere.

The buyer side scripts

There are about five, and they repeat with different props. The item that never ships comes with a good price, a friendly seller and a request to pay by transfer because the platform fee is unfair or the account is new. Once the money moves, the profile is deleted. The listing photos were usually lifted from a genuine advert elsewhere, so a reverse image search of them is a thirty second test worth running.

Duplicated tickets work because a PDF or a barcode screenshot can be sold to as many people as the seller likes. Every buyer holds a real looking ticket until the scanner at the gate rejects the second one.

The deposit to hold it is common with rentals, cars and anything in demand. You pay a small sum to take the listing down or to reserve a viewing. The deposit is the entire scam, and the viewing never happens.

The lookalike checkout is a link to complete payment on what appears to be the platform or a courier site. It is a copied page that harvests your card details and often a one time code, which is ordinary phishing wearing a marketplace logo. Before typing anything, read the real domain out of the address bar.

The shipping agent turns up on expensive items: the seller proposes an escrow service that will hold the money safely. The company exists only as a website built the week before.

The seller side scripts

Sellers are targeted at least as often, with scripts nobody warns them about. The fake payment confirmation is an email dressed as the platform or a payment provider, saying the money is held and will be released once you upload a tracking number or pay a shipping fee. No money exists, and the giveaway is that it asks you to act before funds appear in your own account. These forgeries copy the real emails closely, so judge them on the red flags that survive a good imitation rather than on how the layout looks.

The payment link sent to you comes from a buyer who cannot pay through the platform and wants to send the money directly. The page asks for your card number and expiry, or your online banking login. Nothing legitimate needs your card details in order to pay you: receiving money requires an account identifier, never a security code.

The overpayment is a buyer who sends more than the price by mistake and asks you to return the difference. The original payment is later reversed as fraudulent, and the refund you sent is real money gone.

Courier fraud is a buyer who insists on arranging their own collection, then produces a payment problem that requires a fee from you, or sends a driver who takes the item before anything clears.

The verification code request asks you to prove you are a real person by reading back a code that just arrived. That code is a signup or password reset code for an account in your name. Reading it out hands over the account.

Why leaving the platform costs you everything

The platform is not just a noticeboard. It holds the message history, the listing, the payment record and whatever identity checks were done, and all of that becomes evidence in a dispute. Buyer protection programs almost always require that the payment went through the platform, so paying outside it does not weaken your case, it usually removes the case entirely.

That is why the move to a messaging app is proposed so early, often in the first reply, dressed up as avoiding fees. In a private chat the messages can be deleted, the account can vanish, and the platform can say truthfully that it has no record of a transaction. Saving a few percent in fees is the most expensive discount on the internet.

Reporting works the same way. A profile you dealt with inside the platform can be suspended and its listings pulled, which is the outcome that protects the next person. Before a large purchase, run the checks you would run on any unfamiliar shop, because the signals that separate a real trader from a pop up apply to private sellers too.

Tickets need their own rules

Tickets are the hardest category: the product is a number that can be copied, and its value falls to zero at a fixed moment.

  • Prefer the official resale route. Most large events run one, and a ticket transferred inside that account system cannot be sold twice.
  • Never accept a screenshot, a photo of a barcode or an emailed PDF as the product. Ask the seller to transfer it through the ticketing app now, before money moves.
  • Treat sold out events with extra suspicion. Genuine spare tickets exist, but scarcity is exactly what makes people pay fast.
  • If the seller cannot name the section and seat, or the details do not match the venue map, stop.
  • Pay by card or through a resale site with a guarantee, and check what the guarantee actually promises.

Meeting and collecting safely

Meeting in person removes the shipping scams and introduces different ones, most of which are solved by where and when you meet. Choose daylight and a busy public place. Many police departments designate a lit, camera covered corner of their car park as a safe exchange zone, and a supermarket entrance works nearly as well. Tell a third person where you are going, and do not invite strangers to your home address.

Inspect before you pay. Power on anything electronic: check a phone is not locked to somebody else's account and that the serial matches the advert, and confirm a laptop boots without a firmware password. For a transfer made on the spot, a sent screen on their phone proves nothing until the money lands in your account, which can take longer than it takes to drive away.

If it has already happened

Speed decides the result, so work in this order rather than researching first.

  1. Call your bank. For a card, dispute the transaction as goods not received. For a transfer, say you are the victim of a fraudulent payment and ask them to attempt recall.
  2. Stop sending anything else, including a final fee to release a parcel that does not exist.
  3. Screenshot the listing, the profile and the message thread before the account disappears, and note the payment reference.
  4. Report the profile to the platform, the only body that can pull the other listings.
  5. File a report with the national fraud body for your country.

The card route has deadlines and is decided on evidence, so it helps to know how a chargeback is argued and what proof it needs before you start. If the money left by transfer instead, the first hour after sending money to a scammer is the one that counts. Filing a report is worth the twenty minutes even when you are refunded, and who to report a scam to and what each body does with it explains where it goes.

One last check. If you typed card details, an address or a date of birth into a page the other party sent you, the loss may not stop at the purchase. Treat it as a data exposure too, and watch for the quiet early signals that somebody is using your details elsewhere.

Common questions

Is it safe to pay a private seller by bank transfer?

Not really, because a transfer carries no purchase protection anywhere. If you are tricked into one, UK banks operate a reimbursement scheme with caps and exceptions, EU banks increasingly check the payee name, and in the US an authorized transfer is usually treated as your own decision. A card payment keeps a dispute route open, so use one whenever the seller will accept it.

How can I tell if a ticket someone is selling is real?

Ask them to transfer it through the official ticketing app while you are still talking, before you pay. A real holder can do that in a minute. A screenshot, a photo of a barcode or an emailed PDF proves nothing, because the same file can be sent to every person who asks. If the seller cannot name the section and seat, walk away.

A buyer sent me a link to receive my payment, is that normal?

No. Receiving money never requires your card number, your security code or your online banking login, and those pages exist to harvest exactly those details. Legitimate payouts arrive in the account you already registered with the platform, with nothing required from you beyond shipping the item once the platform confirms the funds are held.

Why does a buyer want me to read back a code?

Because the code is not theirs. It is a signup or password reset code sent to your number, and reading it out lets them create or take over an account tied to you. No marketplace has a verification process that requires you to share a code you received. Treat every incoming six digit code as private to you.

Can I get my money back if the item never arrived?

Often yes, if you paid inside the platform or by card. Open a dispute with the platform first, inside its time window, and raise a chargeback with your card issuer as goods not received. Keep the listing, the messages and the payment reference, because the case is decided on evidence and the seller account may be deleted within days.