Fake Marketplace Support Messages: How Phishing Scams Target Poshmark, Depop, and Facebook Users in 2026
Phishing attacks disguised as official marketplace support messages are surging in 2026. The Anti-Phishing Working Group recorded over 5 million phishing attacks in 2023, a record high — and marketplace platforms like Poshmark, Depop, Facebook Marketplace, and eBay are prime targets. Scammers craft messages that look identical to legitimate platform communications, tricking users into handing over login credentials, payment details, and personal information.
How This Scam Works
Scammer sends a convincing email or message that appears to come from the platform's official support team, using copied logos, formatting, and language.
The message warns of an urgent account issue: suspicious activity, payment hold, policy violation, or mandatory verification deadline.
A prominent link or button directs you to "resolve" the issue — but the URL leads to a fake login page that perfectly mimics the real platform.
You enter your username and password on the fake page, which are immediately captured by the scammer.
The scammer logs into your real account, changes your payout details, makes unauthorized purchases, or uses your account to scam other users.
The Anti-Phishing Working Group recorded over 5 million phishing attacks in 2023, with marketplace and e-commerce platforms being the most impersonated category.
What People Are Saying
Real experiences from people who've encountered this scam.
"I got what looked like an official Facebook email saying my account would be deactivated if I didn't verify within 24 hours. The page looked perfect. I entered my info before I realized the URL was slightly different. They had my account in minutes."
— Facebook Marketplace user, YouTube comment
"Facebook needs to really do something about this — it's getting out of control. Everyone needs to be verified. It doesn't even make you want to use the platform anymore."
— Frustrated platform user, YouTube comment
"I posted a listing and within 5 minutes got two messages from 'support' saying I violated a policy. Brand new accounts, no profile picture. It's relentless."
— Marketplace seller, YouTube comment
How proof.show Helps You Verify Support Messages Are Real
You receive an email that looks exactly like it's from Facebook, Poshmark, or eBay. It says your account is 'suspended' or 'under review' and you need to verify your identity immediately. The branding is perfect. But is this actually from the platform — or a phishing page about to steal your login?
If a 'support message' asks you to verify your identity, don't click their link. Instead, go directly to the platform's official website.
If a buyer or seller contacts you claiming to be from support, ask them for a proof.show verification: "If you're really from this platform, verify yourself at proof.show."
No legitimate support representative will ask you to log in through an unfamiliar link. But a real person can take a proof photo in 10 seconds to prove they are who they claim to be.
For any transaction where the other party claims special authority — platform support, a manager, a verified seller — request their Proof Code. Verify at proof.show/v.
Phishing pages can perfectly copy a platform's branding, logo, and layout. But scammers cannot produce a live, cryptographically sealed photo proving they work where they claim. proof.show adds a layer of identity verification that no phishing attack can replicate.
Prevention Tips
Follow these steps to stay safe from this scam.
Never click links in emails or messages claiming to be from marketplace support. Instead, open the platform's app or website directly and check your account notifications there.
Verify the sender's email address carefully. Official platform emails come from verified domains (e.g., @poshmark.com, @depop.com), not from Gmail, Yahoo, or misspelled variations.
Enable two-factor authentication (2FA) on every marketplace account. Even if your password is compromised, 2FA prevents unauthorized access.
Use proof.show to verify the identity of anyone contacting you about a transaction. Legitimate buyers and sellers can prove their identity with a live, verified photo — scammers impersonating support agents cannot.
If you've entered credentials on a suspicious page, change your password immediately, enable 2FA, and check your payout settings for unauthorized changes.
Frequently Asked Questions
Real support messages come from verified platform email domains, reference your account by name, and never ask you to click external links to enter your password. When in doubt, ignore the message and log into the platform directly through its official app or website to check for notifications.
Immediately change your password on the real platform. Enable two-factor authentication. Check your account's payout information for unauthorized changes. Review recent account activity for unauthorized purchases or listings. Contact the platform's real support team to report the compromise.
Yes. If you enter credentials on a phishing page, scammers can access any saved payment methods, change payout bank accounts to redirect your earnings, and make unauthorized purchases. This is why 2FA and unique passwords for each platform are essential.
AI tools make it trivial for scammers to create pixel-perfect replicas of legitimate platform emails and login pages. Automated systems can send millions of phishing messages per day. The combination of low cost, high volume, and significant payoff makes marketplace phishing one of the most profitable scam categories in 2026.
Other Scams to Watch For
Learn about related marketplace scams to keep yourself protected.
Don't Get Scammed
Don't trust a message just because it looks official. Verify the identity of anyone you're transacting with at proof.show/capture — and confirm any Proof Code at proof.show/v.