Three signals, and why they travel together
Across fake storefronts, marketplace listings, rental ads and ticket resales, the same three things appear. Any one alone can have an innocent explanation. Two together should stop the transaction, and all three is not a close call.
The price is well under market. Not a good deal — a deal that does not make sense. A working late-model phone at a third of its resale value, an apartment several hundred dollars below everything comparable in the same building, front-row seats at face value the week of the show. Look up what the item actually sells for before deciding what counts as low.
They will not meet, show, or demonstrate. The reasons are always plausible and always the same: out of town, in the military, closing on a house, currently deployed, working an oil rig. A seller who cannot video call the item in their hands, and cannot meet in a public place, is a seller who does not have the item.
They want to move off the platform. "Text me directly", "email me, the app is glitching", "let us just do this by Zelle and save the fees". The platform is where the record is, where the reviews are, and where any dispute process lives. Leaving it is the point of the request, and it is the moment worth refusing.
A fourth signal shows up on listings rather than in conversation: urgency. Another buyer is on the way, the price goes up tonight, three people are watching. Same function as in phishing messages — remove the pause in which you would check.
Fake storefronts
A convincing online store is a weekend of work. The product photos are lifted from the real manufacturer, the copy is generated, the reviews are written, the payment page is real enough to take a card number, and the traffic comes from paid ads placed against searches for a specific product. The site may run for a few weeks and then vanish, or it may quietly ship a counterfeit.
| Check | What you are looking for |
|---|---|
| Contact details | A physical address, a working phone, and a business name. A contact form alone, or an address that turns out to be a parking lot, is a strong signal. Search the address separately. |
| How you arrived | An ad in a social feed for a brand you already know is a common route to a lookalike. Type the brand into the address bar yourself instead, and compare the domain. |
| The domain itself | Extra words, hyphens or a different suffix around a familiar brand name. Also check how old the site is — a registration a few weeks old under a store claiming twenty years in business is settled. |
| Reviews, read for texture | Dozens of five-star reviews posted within a few days, all praising delivery speed on a store that has not existed long enough to deliver anything. Look for reviews that mention specific product details. |
| Payment options offered | A store that takes cards is far less risky to you than one that pushes bank transfer, crypto or an app. A checkout that quietly drops card support at the last step is a deliberate design. |
| Return and shipping policy | Read it. Absent, contradictory, or copied from another store — including a different store's name left in the text — tells you what you need. |
| The lock icon | Means the connection is encrypted, nothing more. Fraudulent sites have it too. It is not a trust signal and never was. You can see what your own browser reports about a connection with the browser info tool. |
Marketplace listings and meeting in person
Peer-to-peer selling has its own set. The most common is not elaborate: an item that does not exist, a deposit to "hold" it, and a seller who stops replying. Close behind is the reverse — a buyer who sends a payment screenshot that is an image file, or who overpays with a check and asks for the difference back.
The overpayment version is worth understanding precisely because it feels like the fraud is running the other way. A check clears provisionally, funds appear in your account, you refund the excess by an irreversible method, and days later the check is returned as fraudulent and the full amount is pulled back. Funds showing in your balance is not the same as a payment being final. Any transaction where someone sends you too much and asks for a refund of the difference is fraud, without exception.
Another one that catches sellers: a "buyer" who wants to verify you are real by sending a code to your phone and having you read it back. That code is a verification code for an account being created in your name, or a takeover of one of yours. Never read a code to anyone.
For meeting: choose a public place with cameras, many police departments host designated exchange zones in their parking lots, go during daylight, bring someone, and test the item before money changes hands. Pay in cash on the spot or with a method that has a purchase-protection path, not by a person-to-person send made before you have seen the item.
Rentals
Rental fraud is the highest-value version of this for most people, because the sum is a deposit plus first month and it is usually sent by an irreversible method. The listing is typically a real property — photos copied from a genuine sales or rental ad — advertised below the market by someone who has never been inside it.
| Warning | Why it matters |
|---|---|
| You cannot get inside before paying | The single hard rule. Never send a deposit for a place you have not physically stood in, or that a person you trust has not seen for you. |
| The landlord is out of the country or unreachable in person | The standard framing. Keys will be mailed after payment. They will not. |
| Rent noticeably below comparable units | Check three or four similar listings in the same area before deciding what is normal |
| Payment demanded by wire, app or gift card | No legitimate landlord or agent needs an irreversible rail for a deposit |
| The photos appear elsewhere | Run a reverse image search on the listing photos. Finding the same interior on a for-sale listing in another state answers the question. |
| An application fee before any viewing | Fees for credit and background checks exist, but paying one to a person you have not met for a unit you have not seen is a common variant |
| Ownership does not check out | Property ownership is generally a public record. Looking up the county assessor or recorder for the address takes a few minutes and is worth doing on any large deposit. |
Tickets, and other things with a deadline built in
Concert and sports tickets, sneaker releases, and anything sold out concentrate fraud because the buyer already feels the clock. The transfers happen through screenshots and PDFs that are trivially duplicated — the same barcode can be sold to six people, and only the first one through the gate has a ticket. Buy through the venue or a resale platform that transfers into your own account, not into an image. If you are handed a photo of a ticket, you have been handed a photo.
Puppy and pet sales run the same shape with a long emotional runway: a deposit, then a shipping crate fee, then insurance, then a vet certificate, each one a small step past the last. If a purchase has produced two unexpected fees in a row, the pattern is not bad luck.
Payment, which decides how the story ends
| Method | Your position if it goes wrong |
|---|---|
| Credit card | The strongest. Card networks provide a dispute mechanism for goods not received or not as described, and issuers layer their own procedures on it. Time limits and requirements vary — what applies to you is in your cardholder agreement, so read it or call and ask rather than assuming. |
| Debit card | Weaker in practice, because the money leaves your account first and you are seeking it back rather than withholding it. Protections exist and differ from credit; ask your bank what theirs are before you rely on them. |
| Platform checkout with purchase protection | Reasonable, if you stay inside it. Every off-platform message is an attempt to remove this. Read what the platform actually promises — coverage is usually narrower than people assume. |
| Payment app, goods-and-services option | Depends entirely on the app and on choosing the purchase option rather than the personal one. Check the terms of the specific app. |
| Payment app, personal or friends-and-family send | Treat as cash. These are generally designed for people who know each other and typically carry no purchase protection at all. |
| Bank transfer, Zelle-style send, or wire | Effectively final. Recovery depends on speed and on the receiving bank's cooperation. Do not use these with strangers. |
| Crypto, gift cards | No recovery mechanism exists. A seller who requires either has told you what they are. |
Screenshot the listing, the seller profile and the whole conversation before you pay, not after. Fraudulent listings and accounts disappear within hours of the money landing, and a dispute is far easier to make when you can show what was advertised.
After it goes wrong
Contact the payment provider first and ask specifically about their dispute or recall process for this type of transaction — the answer varies and the clock is usually short. Report the listing and the account to the platform, which sometimes has its own remedy and in any case gets the account closed before it takes someone else. File with the FTC at reportfraud.ftc.gov. Keep every screenshot, message and receipt in one folder; if the record matters to you, keep it somewhere it will still exist next year, which is what a backup routine is for.
Then stop responding to the seller. Once a fraudulent counterparty knows a transaction was noticed, the next message is often an offer to sort it out through a further payment, and that is a second loss dressed as a resolution.
Everything above reduces to one decision made before you click: use a payment method that has a dispute process on the other side of it. The story a seller tells is theirs to control. The rail you pay on is yours.
Questions people ask
Is a website with a padlock icon safe to buy from?
No, and this is one of the most persistent misunderstandings in online shopping. The padlock indicates that traffic between your browser and the server is encrypted, which prevents someone on the same network from reading it. It says nothing about who runs the site or whether they intend to ship anything. Certificates are free and take minutes to obtain, so fraudulent stores have them as a matter of course. Judge the site on contact details, domain age, how you arrived at it, the texture of the reviews, and above all which payment methods it accepts.
A buyer sent me too much and asked me to refund the difference. What is going on?
That is the overpayment scam and it is fraudulent every time, with no legitimate version. A check or transfer arrives for more than the agreed price, the funds show in your balance, you send the excess back by a method that cannot be reversed, and days or weeks later the original payment is returned as fraudulent and the whole amount is taken back from your account. Funds appearing in your balance is not the same as a payment being final. Never refund an overpayment; return the entire payment through the same channel it came in, or decline it and end the transaction.
The landlord says they are out of state and will mail the keys. Should I send a deposit?
No. That is the standard framing of rental fraud, and the listing photos are usually copied from a genuine sales or rental ad for a real property the person has never entered. The rule that holds without exception is that you do not send money for a place you have not stood inside, or that someone you trust has not viewed for you. Run a reverse image search on the photos, and look up the property in the county assessor or recorder records to see who owns it — both take a few minutes. If the rent is well below comparable units in the same area and the payment has to be a wire or an app, you already have your answer.
Which payment method gives me the best chance if a purchase goes wrong?
A credit card, in general. Card networks provide a dispute mechanism for goods that never arrive or arrive not as described, and issuers add their own procedures on top. The important qualification is that the details — what qualifies, what evidence is needed, how long you have — vary by issuer and are set out in your cardholder agreement, so check yours rather than trusting a general claim. At the other end, wires, bank sends between people, cryptocurrency and gift cards have essentially no recovery path, and a personal or friends-and-family send in a payment app is normally treated as cash, not a purchase.
Why do sellers keep asking me to continue the conversation off the platform?
Because the platform is where everything that protects you lives: the message record, the seller's history, the reporting tools, and whatever purchase protection the platform offers. Moving to text or personal email removes all of it and also removes the platform's ability to see the pattern and close the account. The stated reasons — the app is glitchy, it is faster, it saves fees — are uniformly plausible and uniformly serve the same purpose. Refusing costs you nothing; a legitimate seller has no reason to insist.