04.02.2025 - Classified ad websites are a convenient way to sell things. However, as well as legitimate sellers, these websites are full of scammers who are always trying new tricks to get money or information from unsuspecting users. Classified ad phishing is a particularly insidious scam: scammers set up fake websites that look like courier services or the Swiss Post to trick users into giving up their login or credit card details.
Many sales are made through classifieds. Scammers use a variety of tricks to try to deceive sellers in order to get their money or personal information.
Phishing attempts on sellers
In classifieds scams, sellers are contacted by an interested buyer, but the supposed buyer says he does not live nearby and wants the seller to use a courier service. The supposed buyer also claims not to have a TWINT account and suggests that the payment should also be made to the supposed courier service – in one case reported to us, the Swiss Post. The scammer sends a screenshot of a fake website that looks deceptively real, followed by a phishing link or QR code to the scam website. The victim is then asked to enter their credit card details and the verification code sent by text message, supposedly to pay for shipping costs and complete the purchase. In reality, the scammer uses this information for nefarious purposes.
Fake support phishing scam
In this version of the scam, the scammer sends the seller a link to a fake Swiss Post support site. They say this will help with the sale and transport. On the fake site, the scammer (claiming to be a 'senior specialist' and switching between standard German and Swiss German) asks the seller for their six-digit Twint PIN.
Signs of a scam
Scammers often use similar tricks to fool their victims. Look out for the following signs of fraud:
- Time pressure: Scammers try to create a sense of urgency so that you don't have time to look at things in detail;
- Unusual payment or delivery methods: This is usually a ploy to get your personal or bank details;
- Can’t meet in person: Scammers often claim to live far away, making it impossible for goods to be delivered in person;
- International transactions: Be careful when sending money abroad, as the law can be more complicated in the event of fraud;
- Language errors: Check for spelling and grammar mistakes. Scammers often use machine translation, which can lead to errors.
What you can do to protect yourself
To protect yourself from classified ad scams, you should take the following steps:
- Wait for the full payment to be credited to your account before shipping the product, or arrange for the buyer to pay cash when collecting the product. Do not accept cheques;
- Do not rely on email payment confirmations. They can be faked. Check your account directly to confirm that you have received the full payment;
- Be suspicious if the buyer wants to pay more than originally agreed;
- If you are selling an item, do not pay any supposed shipping or transaction fees;
- Be especially careful when selling abroad;
- Only use photos that you have taken yourself in your sales ads (copyright). In general, be careful when selling goods via social media platforms such as Facebook Marketplace;
- As a seller, you should never give out your credit card details or a TWINT PIN. The buyer does not need this information to send you money;
- Avoid buying from sellers abroad, as the legal situation is more complicated in the event of a scam and it may be more difficult to get your money back;
- Never click on links in suspicious emails or text messages, and if you do, never enter any personal information on the website you are directed to;
- Use strong passwords that are a combination of upper and lower case letters, numbers and special characters, and are at least twelve characters long. Do not use passwords that are too easy, such as '123456', your name or date of birth;
- If you accidentally enter your password on a phishing site, change the password immediately everywhere you use it. If it is an email password, also reset all passwords for web services associated with that account. Report the phishing URL on www.antiphishing.ch (if you would like to receive a response to your report, use the NCSC online reporting form instead);
- If you have given your credit card details to a scammer, contact your credit card company immediately to have the card cancelled;
- Whether you are a buyer or a seller, do not share copies of your ID or passport. If you have sent a copy of your ID or passport to a scammer, report the incident to your local ID or passport office.
If you have suffered financial loss, we recommend that you file a report with the cantonal law enforcement authorities. You can use the Suisse ePolice website to find the nearest police station.
Current statistics
Last week's reports by category:
Last modification 04.02.2025
