DEV Community: WarnScams

Facebook Marketplace Scams: The 10 Tricks Sellers and Buyers Use on You

WarnScams — Tue, 20 Oct 2026 17:39:16 +0000

This article was originally published on warnscams.com.

You list an old phone on Facebook Marketplace and within minutes a buyer is thrilled — thrilled enough to send you more money than you asked for, and to ask you to wire back the difference. Or you spot a near-new motorcycle at a price that makes your heart race, and the seller begs you to pay a deposit right now before someone else grabs it. Both of these conversations end the same way: your money is gone, and the person on the other end never existed.

Facebook Marketplace is one of the largest places in the world to buy and sell used goods — and one of the most fertile hunting grounds for fraud. The FTC's own consumer guidance warns that scams on online selling platforms follow a familiar pattern: scammers push you off the platform, rush you past your better judgment, and steer you toward payment methods that offer no protection. Victims include both buyers who never receive what they paid for and sellers who are tricked into sending money to fake buyers.

Meta itself acknowledges the risk. Its official Marketplace safety guidance warns users to be cautious with person-to-person transactions, to keep communication inside Facebook, and to know that only eligible purchases made through Facebook's own checkout are covered by Purchase Protection — cash meetups and off-platform payments are not. That one distinction explains nearly every scam below: fraud works by moving you outside whatever protection you had.

This guide walks through the ten most common tricks used on Marketplace — by fake sellers and fake buyers alike — plus how to spot them, how to verify anyone you deal with, and what to do if you have already been caught.

The 10 Tricks Scammers Use on Marketplace

1. The Overpayment "Buyer."

A buyer offers more than your asking price — often with an elaborate story about an agent, a shipping company, or an accidental extra zero. They send a fake check or use stolen payment details, then ask you to refund the "extra" via Zelle, wire, or gift cards. Days later the original payment bounces or is reversed as stolen, and the money you sent is gone. The FTC's rule is simple: never deposit a check for more than the selling price, and never wire back a difference.

2. The Verification-Code Steal.

The buyer says they need to "verify you're real" and asks you to share a code just texted to your phone — often a Google Voice verification code. If you read it out, they use it to create a Google Voice number linked to your real number, which they then use to run scams in your name. The FTC says it directly: never share a Google Voice verification code — or any verification code — with someone you don't know.

3. The Fake Payment Screenshot.

The buyer sends you a convincing screenshot or email claiming payment was sent, is "pending," or will be "released" once you ship the item or hand it to a courier. Screenshots and emails cost nothing to fake. Meta's guidance and consumer watchdogs agree: treat any screenshot as untrusted until the money actually appears in your real account.

4. The Too-Good-to-Be-True Listing.

A nearly new iPhone, a designer sofa, or a used car at a fraction of market price — with photos stolen from legitimate listings elsewhere. The seller's goal is not to sell you the item; it is to get a deposit, a "holding fee," or full advance payment for something they never owned. If a deal seems too good to be true, it almost always is.

5. The Deposit-First Rental or Car Scam.

A beautiful apartment or vehicle is listed far below market rate. The "landlord" or seller claims to be out of town, cannot show the property, and demands a deposit or application fee to "hold" it. They may send a fake lease or a link to a copied rental site. Never pay a deposit for a property or vehicle you have not seen in person and verified independently.

6. The Off-Platform Payment Push.

Everything is friendly in Messenger until the seller insists on moving payment to Zelle, Cash App, Venmo, PayPal friends-and-family, crypto, or a wire transfer "for a discount." These methods are difficult or impossible to reverse, and moving off Facebook's checkout removes Purchase Protection entirely. Consumer experts call this the brightest red flag on the platform: legitimate sellers don't need you to abandon the one payment flow that protects you.

7. The Bait-and-Switch Meetup.

At an in-person meeting, the item in the box isn't the item in the photos — a phone with a cracked screen swapped into a case, a console replaced with weights, or an "almost new" appliance that doesn't power on. Scammers rush the exchange and discourage testing. Always power on electronics, inspect the item fully, and meet in a public place — many police stations offer designated safe-exchange zones.

8. The Counterfeit Payment.

At a cash meetup, the buyer hands over counterfeit bills or a fake cashier's check; for larger items like cars, the check may be real-looking but drawn on a nonexistent account. Meta warns that cashier's and certified checks can be counterfeit. For high-value sales, consider meeting at the buyer's bank so staff can verify the check and funds on the spot.

9. The Phantom Courier Fee.

The seller says the item will be shipped by a "trusted courier" and asks you to pay the courier fee upfront — sometimes through a link to a fake shipping site. The item never ships, the courier doesn't exist, and the fee is gone. Legitimate shipping costs are settled within the platform's own checkout, never through a link texted to you.

10. The Impersonator and the Phishing Link.

You get a message that looks like it's from Facebook itself — "your listing violates policy," "verify your account," "your payment is on hold" — with a link to sign in. The link leads to a fake login page that steals your credentials. Separately, scammers hijack real accounts with good ratings and use that borrowed trust to run fake listings. Meta advises doing everything inside the real Facebook app or site: open it yourself rather than clicking links sent in chat, text, or email.

How a Marketplace Scam Usually Unfolds, Step by Step

Step 1: The hook. As a buyer, you see an irresistible listing. As a seller, you get an eager buyer who asks no hard questions. The conversation moves fast because speed is the point.

Step 2: Trust-building. The scammer is polite, responsive, and reassuring. They may send extra photos (stolen), a driver's license (fake or stolen), or stories designed to make them sound relatable. This stage exists to lower your guard before money is mentioned.

Step 3: The move off safe ground. You are steered away from protection: off Facebook checkout, off Messenger, to a different app or a payment link. Meta's own guidance says to keep records of conversations inside Facebook precisely because scammers want them gone.

Step 4: The pressure. "Someone else wants it." "The price goes up tomorrow." "My courier leaves in an hour." Urgency is manufactured so you pay before you can think, check, or ask a friend.

Step 5: The payment. Money moves through an irreversible channel — Zelle, wire, gift cards, crypto, cash to a stranger. Only eligible purchases through Facebook's own checkout carry Purchase Protection; everything else is on you.

Step 6: The vanishing. The profile goes silent, gets deleted, or blocks you. If it was a hijacked real account, the actual owner wakes up to the damage. Either way, tracing a scammer through fake profiles and disposable payment accounts is extremely difficult.

Red Flags: Marketplace Warning Signs

They won't meet in person or allow inspection. "I'm out of town," "my mover has it," "I'll ship it after you pay." Insist on local, in-person deals for used goods.
The chat moves off Facebook immediately. A request to switch to text, WhatsApp, or email right away is a classic setup move.
They ask for any verification code. No legitimate buyer or seller ever needs a code sent to your phone.
They send links to pay, "verify," or track shipping. Never sign in, pay, or enter details through a link someone sent you. Open the app or site yourself.
Payment only by Zelle, Cash App, Venmo, PayPal friends-and-family, gift cards, wire, or crypto. These are the hardest payments to reverse — which is exactly why scammers demand them.
They need a deposit before you see the item. Holding fees, application fees, courier fees paid in advance are a scammer's business model.
The price makes no sense. A fraction of market value is not a bargain; it's bait.
The profile is brand new, has no history, or the name doesn't match. Check the profile's age, friends, and prior listings. Stolen photos and fresh accounts are cheap for scammers.
The same listing appears in multiple cities. Search the listing title in quotes — copied listings posted across cities are a fraud signature.
They discourage testing or questions. "It's sealed," "it worked yesterday," "just trust me." A real seller lets you test.

How to Verify a Buyer or Seller

Keep the whole deal inside Facebook and Messenger. Don't move the conversation or the payment elsewhere. The chat log is your evidence if anything goes wrong.
Use Facebook's own checkout for shipped items. Eligible purchases through checkout are covered by Purchase Protection; person-to-person payments are not. If the seller refuses checkout, walk away.
Inspect the seller's profile. Look at how long the account has existed, whether it has friends and normal activity, and whether its ratings and reviews look genuine. Be wary of profiles created days ago.
Reverse-search the listing photos. Stolen photos from other listings are one of the most common tricks. If the same images appear under different names or in different cities, it's a scam.
Ask for a custom photo or a live video call. Ask the seller to photograph the item next to today's newspaper or a handwritten note with your name — or to show it on a live video call. Scammers who don't have the item can't do this and will make excuses.
Verify payment in your own account, not in a screenshot. Open your bank or payment app yourself and confirm the money is actually there before you ship or hand anything over.
For vehicles and rentals, verify independently. Check a car's VIN through official records, view a rental property in person, and confirm the landlord actually owns it through public property records.
Meet in public, in daylight, and bring someone. Police station parking lots and designated safe-trade zones are the best meeting spots. Tell someone where you're going.

What to Do If You're Being Targeted

Stop the deal immediately. Do not send more money, share more information, or click any more links — no matter how much pressure the other person applies.
Save everything: screenshots of the listing, the full chat history, the profile URL, payment receipts, tracking numbers, and any emails. Scammers delete listings and profiles fast.
Report the listing and the profile to Facebook using the Report option on the listing or profile page. This is also how you protect the next potential victim.
If you paid through Facebook's checkout, file a Purchase Protection claim — buyers have 45 days from delivery (or the estimated delivery date) to file.
If you paid by card, call your card issuer immediately and ask about disputing the charge. If you used PayPal's "Paying for an item or service" option, open a dispute in the Resolution Center.
If you paid by wire, Zelle, Venmo, or crypto, contact your bank or the service right away. Recovery is harder through these channels, but fast reporting gives you the best chance.
If you shared a verification code, change your passwords on the affected accounts immediately and enable two-factor authentication with an authenticator app instead of SMS codes.
Watch for follow-up scams. Victims are often contacted later by fake "recovery agents" who promise to get the money back for an upfront fee. That's a second scam feeding on the first.

How to Report a Facebook Marketplace Scam

Facebook: Report the listing and the seller or buyer profile through the in-app Report function so the account can be reviewed and removed.
Federal Trade Commission: Report at ReportFraud.ftc.gov. The FTC's data helps law enforcement spot patterns across thousands of reports.
FBI Internet Crime Complaint Center: File at ic3.gov, especially for larger losses or organized fraud.
Your local police department, particularly if you met someone in person, were threatened, or lost a significant amount. Bring your screenshots and receipts.
Your state attorney general's consumer protection division, which tracks fraud trends in your state.

Sources

Meta, "Buy and sell responsibly on Facebook Marketplace" (Facebook Help Center) — https://www.facebook.com/help/1156544111079919?locale=en_US
Meta, "Policies and best practices for shipping on Facebook Marketplace" (Facebook Help Center) — http://www.facebook.com/help/464174927656471?locale=en_US
NordVPN, "Facebook Marketplace scams: How to spot and avoid them" — https://nordvpn.com/blog/facebook-marketplace-scams/
Gridinsoft, "Facebook Marketplace Scams: Buyer and Seller Red Flags" — https://blog.gridinsoft.com/facebook-marketplace-scams/
ConsumerAffairs, "Fake Facebook Marketplace listings use your name to draw you into a scam" (October 2026) — https://www.consumeraffairs.com/news/fake-facebook-marketplace-listings-use-your-name-to-draw-you-into-a-scam-100726.html
Android Police, "Facebook Marketplace: How to spot scams and scammers" — https://www.androidpolice.com/avoid-facebook-marketplace-scams-explainer/

Last reviewed: October 2026

This article is for education only and is not financial or legal advice.

Toll Road Text Scam: 'Unpaid Toll' Smishing Texts That Steal Your Payment Info

WarnScams — Tue, 20 Oct 2026 00:06:54 +0000

The toll road text scam may be the most widely seen phone scam in America right now. It arrives as a text message claiming you owe a small unpaid toll — often around $12.51 — and warning of a $50 late fee unless you pay immediately through a link. Millions of people have received some version of it, including many who have never driven on a toll road in their lives. The text looks official, the amount seems too small to question, and the link takes you to a page dressed up like your state’s toll agency. None of it is real: the page is built to harvest your credit card number, and sometimes your driver’s license number and Social Security number as well.

This is not a small-time operation. In April 2024, the FBI’s Internet Crime Complaint Center (IC3) issued a public service announcement after receiving over 2,000 complaints in about a month about smishing texts impersonating road toll services in at least three states — and warned the scam was moving from state to state. The FTC’s 2024 data shows that 16% of all reported fraud attempts were text-based, costing consumers $470 million. Security researchers at Palo Alto Networks’ Unit 42 later traced one smishing operation to more than 194,000 phishing addresses, finding that toll services were the single most impersonated category, with nearly 90,000 dedicated phishing addresses.

The good news: this scam has one of the simplest defenses of any fraud covered on this site. Real toll agencies do not collect payments through links in random text messages. Once you know what real toll billing looks like, the fake texts practically identify themselves. Below is the full breakdown — the exact wording to watch for, why the texts ask you to reply “Y,” and the three things to do every time one lands on your phone.

How the Toll Road Text Scam Works

Step 1: The blast. Scammers send the text to enormous lists of phone numbers — they are not targeting you specifically, which is why people who never use toll roads get them too. The FBI found that the texts use “almost identical language” across complaints, with a nearly identical “outstanding toll amount” each time, and that the sending phone numbers change from state to state.

Step 2: The familiar example. A real example quoted by the FBI reads: “(State Toll Service Name): We’ve noticed an outstanding toll amount of $12.51 on your record. To avoid a late fee of $50.00, visit https://myturnpiketollservices.com to settle your balance.” The amount is deliberately small — small enough that many people pay before they stop to check. The real prize was never the twelve dollars; it is the full card number you type in.

Step 3: The “reply Y” trick. Many versions of the text ask you to reply “Y” before opening the link. This is not bureaucracy — it is technical. On iPhones, links from unknown senders stay disabled until you reply or add the sender to your contacts, so your reply is the one step the attacker cannot do for you. And note: replying “STOP” is still a reply — every response confirms to the sender that your number is live and active, which makes it more valuable when traded.

Step 4: The lookalike payment page. The link leads to a convincing replica of a state toll agency site — E-ZPass, FasTrak, I-PASS, or a generic “Toll Enforcement Authority” page complete with legal jargon, violation details, and threats of registration suspension or collections. The page asks for your card details and, in many versions, your driver’s license and other identity documents. Everything you enter goes straight to the criminals.

Step 5: The harvest. Security researchers have documented how phished card data from these campaigns is rapidly loaded into Apple Pay and Google Wallet, letting criminals spend from your card through their own phones. What started as a $12.51 “toll” can become thousands in fraudulent charges before you notice.

Red Flags of the Toll Road Text Scam

A text about tolls you don’t remember owing — or from an agency in a state you’ve never visited. Scammers blast these texts indiscriminately. Receiving one with no connection to your driving is the clearest sign it’s fake.
A payment link in the text. Legitimate toll agencies send bills by mail or handle payments through their own app or your existing account. They do not text you a link and ask you to pay through it.
A demand to “reply Y” or take an extra step to open the link. No legitimate toll agency asks you to reply to a text to activate a payment link. That step exists only to bypass your phone’s spam protections.
A suspicious domain. The FBI specifically warned that the link “is created to impersonate the state’s toll service name” — a lookalike domain, not the agency’s real website. Researchers found campaigns using hundreds of thousands of such addresses, including many on the Chinese .xin top-level domain.
Threats of immediate penalties. “Pay by today or face a $50 late fee and suspension of your registration” is pressure language. Real toll violations arrive by mail with a formal notice and a real dispute process, not a text demanding instant payment.
Requests for your driver’s license or Social Security number. A toll payment needs a payment method — not your identity documents. Any toll site asking for those is harvesting your identity.
Tiny amounts designed to bypass your skepticism. The FTC and state DMVs have warned about texts claiming a “small amount” in unpaid tolls. The small figure is deliberate: it makes you pay first and check later.

How to Check Whether You Actually Owe a Toll: 5 Steps

Do not click the link and do not reply. Not even to text STOP. Delete the message without engaging — any reply confirms your number is active.
Type the toll agency’s address yourself. Open your browser and type the official website of your state’s toll agency from memory or a search you run yourself — never use the link or phone number in the text. Log in to your existing account or use the agency’s “pay a toll” lookup.
Use the agency’s official app or phone number. If you prefer to call, find the customer service number on the agency’s official website, not in the text message.
Check how the agency actually bills you. Toll agencies send violation notices and invoices by U.S. mail, or through an account you created. If you have never created an account with that agency and never received mail from them, a text demanding payment is not real.
When in doubt, ask the agency directly. A two-minute call to the real customer service line settles the question completely. That is the step scammers hope you skip.

What to Do If You Already Clicked or Paid

If you clicked the link but entered nothing, you are almost certainly fine — close the page and delete the text. If you entered card details, treat it as compromised immediately: call your bank or card issuer, report the fraud, and request a replacement card with a new number. Review your statements for unfamiliar charges and dispute any you did not authorize.

If you entered your driver’s license number, Social Security number, or other identity documents, take identity-theft precautions: place a fraud alert with the three credit bureaus (Equifax, Experian, and TransUnion), consider a full credit freeze, and visit IdentityTheft.gov for a personalized recovery plan from the FTC. Change any passwords you entered on the fake site, especially if you reuse them elsewhere.

How to Report a Toll Road Text Scam

Every report helps investigators map these campaigns, which hop between states and domains constantly:

Forward the text to 7726 (SPAM). This reports it to your mobile carrier’s spam-filtering system. You can also use your phone’s built-in “report junk” option.
FTC: Report at ReportFraud.ftc.gov. The FTC’s January 2025 consumer alert on this exact scam — “Got a text about unpaid tolls? It’s probably a scam” — urges consumers to report and delete these messages.
FBI Internet Crime Complaint Center: File at ic3.gov. The FBI’s April 2024 public service announcement specifically asks victims to include the phone number the text came from and the website listed in the text.
Your state toll agency and attorney general: Many state toll agencies and DMVs now run their own warnings about these texts; notifying them helps them alert other drivers in your state.

Sources

FBI Internet Crime Complaint Center (IC3), Public Service Announcement I-041224-PSA, “Smishing Scam Regarding Debt for Road Toll Services” (April 12, 2024) — https://www.ic3.gov/PSA/2024/PSA240412
Infosecurity Magazine, “FBI Warns of Massive Toll Services Smishing Scam” — https://www.infosecurity-magazine.com/news/fbi-toll-services-smishing-scam/
MalwareTips, “Toll Enforcement Authority Scam Texts — What You Need To Know” — https://malwaretips.com/blogs/toll-enforcement-authority-scam-texts/
Cybernoz, “New warning issued over toll fee scams” (May 2025, citing Malwarebytes, FTC 2024 Annual Data Book, and state DMV warnings) — https://cybernoz.com/new-warning-issued-over-toll-fee-scams/
Sheftali.net, “Unpaid Toll Text: Why It Says Reply Y” (October 2026, citing BleepingComputer, Malwarebytes, and Palo Alto Networks Unit 42) — https://www.sheftali.net/2026/10/unpaid-toll-text-why-it-says-reply-y.html
Black Enterprise, “Unpaid Toll Scam Is Now A National Smishing Campaign” (quoting the FTC’s March consumer alert) — https://www.blackenterprise.com/unpaid-toll-text-national-scam/amp/

Last reviewed: October 2026

This article is for education only and is not financial or legal advice.

Originally published on WarnScams — practical scam-awareness guides backed by FTC, FBI and regulator sources.