Etsy says it will never ask for your password over Messages, never asks for your email to complete a purchase, and never offers a customer service phone number. Any message that breaks one of those three rules is a scam, no matter how official it looks.
Get More Etsy Seller Tips Like This
New seller guides and marketplace tips, straight to your inbox. No spam, unsubscribe anytime.
Table of Contents
- Introduction
- Why “I’ll Know a Scam When I See One” Fails
- The One Rule That Catches Most Etsy Scams
- The Most Common Etsy Scams Aimed at Sellers
- The Step-by-Step Method
- Real Etsy Signals vs. Scam Signals
- Common Mistakes That Turn a Scam Into a Loss
- Tools and Resources
- A Worked Example
- Frequently Asked Questions
- Key Takeaways
- The Bottom Line
Introduction
Every Etsy seller with a public shop gets scam messages. They show up as a “buyer” who needs your email, an “Etsy Support” note warning that your shop will be closed, a text asking you to verify your account, or a QR code that supposedly confirms a payment.
This guide shows you how to spot those scams in seconds and what to do when one lands in your inbox. You’ll get the red flags Etsy itself lists, a side-by-side check for real Etsy messages, an account lockdown routine, and a recovery plan if you already clicked. Every rule below comes from Etsy’s Help Center, Etsy’s Purchase Protection policy, or the US Federal Trade Commission, linked in each section so you can check them yourself.
Here’s exactly how it works.
Why “I’ll Know a Scam When I See One” Fails
Most sellers believe they would never fall for a phishing message. Then a message arrives on a busy Monday, it uses the word “Etsy” in the sender name, it mentions a real-sounding problem with Etsy Payments, and it says the shop will be suspended in 24 hours.
That pressure is the point.
Scam messages are built to make you act before you think. Etsy’s own guidance on handling scams and suspicious messages lists “urgent, emotional language” and threats like “respond immediately or your account will be suspended” as a red flag for exactly this reason.
Gut feel fails because scams are designed to feel normal. A fixed checklist works better, because you run it the same way every time, even when you’re tired or a sale is on the line.
There’s a second reason sellers get caught. Many scams don’t look like attacks at all. They look like eager buyers: someone who loves your work, wants to buy three items, and only needs you to send an invoice by email. A seller who has been waiting weeks for a first sale on Etsy wants to say yes.
The One Rule That Catches Most Etsy Scams
Nearly every scam aimed at Etsy sellers has the same goal. It tries to move you, your login, or your money off Etsy.
That can mean a link to a fake sign-in page, a request to reply by personal email, a QR code, a phone number to call, or a payment by a method Etsy doesn’t process. Once you leave Etsy’s systems, the scammer can steal your password or take money without Etsy’s records and protections in the way.
If a message asks you to leave Etsy.com or the Etsy app, treat it as a scam until you prove otherwise. Etsy’s help page names attempts to move you off Etsy as the first red flag for any member, including links that trigger the “You’re about to leave Etsy” warning.
The money side matters just as much. Etsy’s help page says payments sent outside Etsy are not covered by Purchase Protection. The Purchase Protection program for sellers applies to orders placed and paid for on Etsy, shipped to the address provided on Etsy. A buyer who asks you to skip Etsy checkout is asking you to give up that cover.
Etsy’s rule of thumb fits in one line: keep the conversation, the payment and the sign-in on Etsy.
The Most Common Etsy Scams Aimed at Sellers
You’ll see the same handful of scam types again and again. Knowing them by name makes the next one easy to spot.
Fake Etsy staff messages
These arrive in your regular inbox from an account with a name like “Etsy Support,” “Etsy Team,” or “Etsy Verification.” They claim your shop has a problem, such as an unverified bank account, a listing that needs approval, or a payment hold, and they include a link or QR code to fix it. Threats of closure work because sellers know real suspensions happen; our guide to surviving an Etsy shop suspension shows what Etsy’s actual notices and appeal steps look like.
Etsy’s help page states that a name containing “Etsy” doesn’t prove a message comes from Etsy. Real Etsy messages land in a separate From Etsy inbox, carry a “From Etsy” badge below the subject line, and come from a profile with an “Etsy staff” badge.
The “send me your email” buyer
A buyer asks for your email address so they can “finish the purchase,” “send payment details,” or “confirm the order.” Etsy’s help page says Etsy will never ask for your email to complete a purchase.
The follow-up is usually a fake payment email that looks like it came from Etsy or a payment company, asking you to click a link, pay a fee, or “upgrade” your account to receive the money.
QR code “verification” and “payment confirmation”
A QR code is a link you can’t read. Scammers use them because the destination is hidden until your phone opens it. Etsy lists QR codes offered to contact support, verify information, or confirm a purchase as red flags for sellers.
Phishing texts and emails
A text or email says your Etsy account is locked, a payment failed, or you need to verify your identity, and it gives a link. Etsy’s account security page says genuine Etsy security alerts sent by SMS contain no links. Etsy’s real emails direct you to sign in to Etsy to finish an action, such as updating your bank account.
Overpayment offers
A buyer offers to pay more than your price, often to “cover a mover” or “a shipping agent,” and asks you to send the extra back. Etsy lists offers to pay more than your asking price as a seller red flag.
The US Federal Trade Commission explains how this works in its guidance on fake check scams: the payment turns out to be fake after you’ve sent real money, and you’re left owing the difference.
Off-platform payment requests
The buyer wants to pay by bank transfer, a payment app, gift cards, or crypto instead of Etsy checkout. Sometimes they say Etsy checkout “isn’t working in my country.” Etsy treats buyers who refuse Etsy checkout as a red flag because the order loses Purchase Protection. If a later dispute does happen on an Etsy order, our guide to Etsy chargebacks and payment disputes covers how Etsy handles it.
Fake support phone numbers
Search results and social media posts sometimes list an “Etsy customer service number.” Etsy’s help page says Etsy doesn’t provide a customer service phone number, so any number you find online is not legitimate. Etsy also says it doesn’t make unrequested phone calls without prior notification.
Address-change requests after checkout
A buyer pays on Etsy, then messages a different shipping address. This is sometimes innocent, but it is also how some fraudsters redirect goods. Etsy’s Purchase Protection policy tells sellers to ship to the address provided on Etsy and to be mindful of fraud when a buyer sends an alternate address through Messages. The policy suggests you can cancel and refund the order and ask the buyer to repurchase with the corrected address.
The Step-by-Step Method
Here’s how to handle any suspicious message, from the first glance to the cleanup.
Step 1: Check where the message landed
What: Look at which inbox the message is in before you read the body.
Why: Etsy puts its real messages in the From Etsy inbox with a “From Etsy” badge, so location alone rules out most fakes.
How: In Messages on Etsy.com, check the folder. Then open the sender’s profile and look for the “Etsy staff” badge. If the message sits in your main inbox and claims to be from Etsy, it’s fake. Etsy’s help page also warns about messages that claim the From Etsy folder “isn’t working” to explain a missing badge.
Example: A message titled “Final notice: shop verification required” sits in your Inbox from a profile called “EtsySupportTeam.” No badge, wrong folder. You can stop there.
Step 2: Run the five-second red-flag scan
What: Read the message once, looking only for warning signs.
Why: Etsy’s help page lists a short set of red flags that cover most scams, and checking them takes seconds.
How: Look for any of these:
- A link, QR code, phone number, or email address you’re asked to use
- Urgent threats about suspension or lost payments
- A generic greeting such as “Dear Seller”
- A request for your password, email, phone number, or mailing address
- An offer to pay more than your price, or to pay outside Etsy
- Odd formatting, such as mixed fonts or random bold text
- Vague questions that show the sender hasn’t read your listing
Example: “Hello dear seller, is this item still available? I want to buy it for my daughter, please send me your email so I can complete payment.” Generic greeting, vague question, email request. Three flags in one line.
Step 3: Don’t reply, click, or scan
What: Take no action inside the message.
Why: Replying confirms your account is active, clicking a link can lead to a fake login page, and scanning a QR code opens a link you couldn’t inspect.
How: Close the message. If you need to check a claim, such as “your payment account is on hold,” go to Etsy.com yourself by typing the address and open Shop Manager. Etsy’s help page says real account actions show alerts in Shop Manager as well as in the From Etsy inbox.
Example: A text says your Etsy deposits are paused. Instead of tapping the link, you open the Etsy Seller app you already have installed and check the Finances section. Nothing is paused.
Step 4: Report it the right way
What: Send the scam to Etsy through the official channel for its type.
Why: Reporting moves the message out of your inbox and gives Etsy data to act on scam accounts.
How:
- For a suspicious message on Etsy.com, select it and choose Report.
- In the Etsy Seller app, tap the three dots and choose Mark as spam.
- For a phishing email, a screenshot of a scam text, or a fake phone number, forward it to ReportPhishing@etsy.com.
Etsy’s help page says that address is only for phishing reports and that you won’t get a reply. Reporting a message moves it to your Spam folder. The sender can still buy from your shop, so a reported account isn’t blocked from ordering.
Example: You report the “dear seller” message, forward a fake “Etsy Payments” email to the phishing address, and move on with your day.
Step 5: Turn on two-factor authentication
What: Add a second sign-in step to your Etsy account.
Why: If a scammer ever gets your password, two-factor authentication (2FA) stops them at the code screen.
How: On Etsy.com, go to your profile icon, then Account settings, then Security, then 2 factor authentication, and choose Turn on 2FA. Etsy’s security page lists SMS, phone, and authenticator app options and says the authenticator app is the more secure choice. In the Etsy Seller app, the path is the More tab, then Account & app settings, then 2 Factor authentication.
Save your backup codes when Etsy shows them. Etsy’s security page says each code works once, the codes are shown only once, and Etsy Support will never ask you for them.
Example: You set up an authenticator app, save the backup codes in your password manager, and sign in once on a second browser to confirm the code works.
Step 6: Turn on security alerts and review sign-ins
What: Let Etsy text you about suspicious account activity, and check who has signed in.
Why: Early warning gives you time to change your password before damage is done.
How: In Account settings, then Security, verify a mobile number and turn on security alerts. Etsy’s security page says landlines aren’t accepted for this. Then use the Security tab to review your sign-in history, which shows recent sign-ins. Remove third-party connections you don’t recognize.
One rule from earlier applies here: an Etsy security text never contains a link.
Example: Your sign-in history shows a session from a city you’ve never visited. You change your password at once and confirm 2FA is on.
Step 7: Check payment and deposit details on a schedule
What: Review your bank account and billing details in Shop Manager every month.
Why: Account takeovers often target deposits. Etsy’s security page recommends that sellers review payment and billing details regularly.
How: In Shop Manager, open your payment settings and confirm the bank account on file is yours. Make sure any recent changes were made by you. If you rely on deposits for cash flow, our guide to how Etsy Payments deposits work explains what normal timing looks like, so an “urgent deposit problem” message is easier to dismiss.
Example: You put a 10-minute task on your calendar for the first Monday of each month: check bank details, sign-in history, and connected apps.
Step 8: Keep every order on Etsy, start to finish
What: Run conversation, payment, and shipping through Etsy for every order.
Why: Purchase Protection only applies when the order meets Etsy’s requirements, and off-platform payments aren’t covered.
How: Answer buyers in Etsy Messages. Take payment only through Etsy checkout. Ship to the address on the Etsy order. Mark the order shipped and add valid tracking, or use a label bought on Etsy. If a buyer sends a new address in Messages, cancel and refund instead of shipping somewhere else, then ask them to order again with the right address.
For custom work, build the order as a listing on Etsy rather than sending a payment request elsewhere. Our guide to handling Etsy custom orders walks through that setup.
Example: A buyer asks to pay for a $180 custom piece “directly, to avoid fees.” You reply that all orders go through Etsy checkout and send a private custom listing instead.
Step 9: Know what to do if you already clicked
What: Act in the right order if you entered details, sent money, or scanned a code.
Why: Speed limits the damage, and Etsy’s help page lays out the steps for each situation.
How:
- If you shared account information, report the message, change your Etsy password, and turn on two-factor authentication. Change the same password anywhere else you used it.
- If you sent money off Etsy, contact the payment company or platform you used right away, and contact local law enforcement. Etsy says these payments aren’t covered by Purchase Protection.
- If money changed hands, contact your bank or card provider too.
- In the US, you can also report fraud to the FTC at ReportFraud.ftc.gov.
- Review your sign-in history and payment details as in Steps 6 and 7.
Example: You typed your password into a fake login page and noticed the web address was wrong. Within 10 minutes you changed your password, turned on 2FA, reported the message, and checked that your bank details hadn’t changed.
Real Etsy Signals vs. Scam Signals
Use this table as a quick check when a message claims to come from Etsy.
| Check | Real Etsy | Scam |
|---|---|---|
| Inbox | From Etsy inbox | Your regular inbox |
| Badge | “From Etsy” badge and “Etsy staff” profile badge | No badge, or an excuse for why it’s missing |
| Sender name | Etsy staff profile | Any name with “Etsy” in it |
| Links | Asks you to sign in to Etsy yourself | Link, QR code, or short URL to “verify” |
| Security texts | No links | Link to “unlock” or “verify” your account |
| Phone | No customer service phone number | A number to call “Etsy Support” |
| Requests | Never asks for your password or email over Messages | Asks for your password, email, phone, or address |
| Tone | Clear wording without spelling errors | Urgent threats, odd grammar, mixed fonts |
| Web address | etsy.com, help.etsy.com, community.etsy.com | Lookalikes such as login-etsy.com or etsy.verify |
Etsy’s help page gives login-etsy.com, etsy.verify, and etsy.com.@offer as examples of fake addresses. That last one is worth a second look: the text before the “@” can be anything, and the real destination comes after it.
The web address is the single most reliable check on any link. Read it from the right side of the domain, not the left.
Common Mistakes That Turn a Scam Into a Loss
Spotting a scam is half the job. These are the mistakes that turn a suspicious message into lost money or a lost account.
Replying “is this a scam?”
Sellers sometimes reply to a fake message to ask if it’s real. All that does is tell the scammer the account is active and someone reads it. Etsy’s guidance is to not respond at all and to report the message instead.
Trusting a message because it mentions a real order
Order details aren’t secret. Shop names, listing titles, and prices are public. A message that quotes your listing title proves the sender looked at your shop, nothing more. The same public listings are what copycats scrape, which our guide to handling Etsy copycats and listing theft deals with. Check the inbox and badge instead.
Calling a number from a search result
Etsy doesn’t offer a customer service phone line. If a search result or a social post gives one, it’s someone else’s number. Contact Etsy through the Help Center while signed in to your account.
Shipping to a messaged address
Shipping to an address that differs from the one on the Etsy order is a fast way to lose both the item and Purchase Protection. If the address needs to change, cancel, refund, and let the buyer reorder. Our guide to cancelling and refunding Etsy orders covers what happens to your fees when you do this.
Accepting “a little extra” for shipping or a mover
Any plan that ends with you sending money back to a buyer is a scam pattern. The FTC’s fake check guidance makes the same point: there’s no good reason for someone paying you to ask for money back.
Leaving 2FA off because “I’ve never had a problem”
Most account takeovers start with one reused password. Two-factor authentication costs you a code every so often. Etsy’s security page says you’ll be asked for a code when you sign in from a new browser or device and every 30 days, which is a small price for keeping a shop’s income safe.
Treating a buyer-side case as a scam message
Real buyer problems come through Etsy’s order help flow, and you’re expected to answer them. Etsy’s Seller Handbook article on Purchase Protection for sellers says sellers must respond to Help with Order messages within 48 hours to stay protected. Don’t ignore a real help request because the last ten messages were spam. Fast replies also count toward Etsy’s Star Seller program, so spam filtering shouldn’t slow down your answers to actual buyers. Our guide to resolving Etsy cases explains how those requests work.
Tools and Resources
You don’t need paid software to protect an Etsy shop. These free tools cover almost everything in this guide.
- Etsy Help Center: How to Handle Scams and Suspicious Messages (help.etsy.com). Etsy’s official red-flag list and reporting steps. Free.
- Etsy Help Center: How to Make Your Account More Secure (help.etsy.com). Two-factor setup, backup codes, security alerts, and sign-in history. Free.
- An authenticator app. Google Authenticator and Microsoft Authenticator are common free choices. Etsy’s security page rates the authenticator app option as more secure than SMS.
- A password manager. It creates a unique password for Etsy and fills it in only on the real site, which helps you notice a fake login page. Free and paid options exist.
- ReportPhishing@etsy.com. For forwarding phishing emails, scam text screenshots, and fake phone numbers. Free, no reply.
- FTC ReportFraud (reportfraud.ftc.gov). For US sellers reporting fraud and scams to the federal government. Free.
For broader shop housekeeping, our roundup of the 7 best AI tools for Etsy sellers and our virtual assistant services guide are useful if other people help run your shop. Etsy’s security page says you’re responsible for activity on your account, so give access only to people who need it.
A Worked Example
Here’s a hypothetical shop to show the method in action. It is an illustration, not a real seller.
The shop: A one-person shop sells hand-thrown ceramic mugs at $42 each. It’s November, holiday orders are picking up, and the owner checks messages between packing orders.
Monday, 9:10 a.m. A message arrives in the main inbox from “Etsy-Seller-Support.” It says the shop’s deposit account failed verification and that the shop will be suspended in 12 hours unless the owner scans a QR code.
The owner runs Step 1. Wrong inbox, no “From Etsy” badge, no “Etsy staff” badge on the profile. Step 2 flags three more problems: an urgent threat, a QR code, and a generic greeting. The owner doesn’t scan the code, reports the message, and opens Shop Manager directly. No alerts. Total time: about two minutes.
Monday, 2:30 p.m. A buyer writes: “Hi dear, I want 6 mugs for my office. Can you email me an invoice? My email is in my profile. I will pay extra $50 for your trouble.”
Step 2 again: email request, an offer to pay more than the asking price, and a generic opening. The owner replies once, politely, with a standard message: “Thanks for your interest. All orders go through Etsy checkout, so you can add six mugs to your cart from the listing.” No reply comes back. The owner marks the thread as spam.
Tuesday, 8:00 a.m. A text arrives: “Etsy: unusual sign-in detected, confirm your identity here,” followed by a short link. The owner remembers that genuine Etsy security texts contain no links, deletes the text, and forwards a screenshot to ReportPhishing@etsy.com.
Tuesday, 11:00 a.m. A real buyer who ordered two mugs on Etsy messages a new delivery address because they moved. The owner follows the Purchase Protection guidance, cancels and refunds the order, and asks the buyer to reorder with the new address. The buyer reorders within the hour.
The result: Four suspicious contacts in two days, no money lost, no account access lost, and the one real order still shipped with protection in place. The owner also used the quiet afternoon to set up an authenticator app and save backup codes, which took about 15 minutes.
The math is simple. A $42 mug order isn’t worth risking a shop that pays the rent. If you want to see what each order actually leaves you after fees, our Etsy fee calculator guide breaks it down.
Fee and policy details mentioned in this article come from Etsy’s published pages as of November 2026 and can change. This article is general information, not legal or financial advice. Check Etsy’s current policies before acting on them.
Frequently Asked Questions
How can I tell if a message is really from Etsy?
Real Etsy messages appear in the From Etsy inbox with a “From Etsy” badge below the subject line, and the sender’s profile carries an “Etsy staff” badge. A sender name that includes “Etsy” proves nothing. If the message is in your regular inbox and claims to be from Etsy, treat it as fake.
Does Etsy ever ask sellers for their email address to complete a purchase?
No. Etsy’s Help Center says Etsy will never ask for your email to complete a purchase. A buyer who needs your email to “finish payment” is almost always setting up a fake payment email or an off-platform payment request.
Does Etsy have a customer service phone number?
No. Etsy says it doesn’t provide a customer service phone number, so numbers found online aren’t legitimate. Contact Etsy through the Help Center while signed in to your account.
Where do I report a scam message on Etsy?
On Etsy.com, select the message and choose Report. In the Etsy Seller app, tap the three dots and choose Mark as spam. Forward phishing emails, scam text screenshots, and fake phone numbers to ReportPhishing@etsy.com, which is only for phishing reports and doesn’t send replies.
Will reporting a buyer block them from my shop?
No. Etsy’s help page says reporting moves the message to your Spam folder, but the member can still buy from your shop. If you report a message by mistake, open Spam on Etsy.com, select it, and choose Not Spam.
Is it ever safe to accept payment outside Etsy?
For orders that start on Etsy, payment should go through Etsy checkout. Etsy says payments sent off Etsy aren’t covered by Purchase Protection, and buyers who refuse Etsy checkout are a red flag. Keeping payment on Etsy also keeps the order inside Etsy’s records if a dispute comes up.
What should I do if I clicked a phishing link?
If you entered your login details, change your Etsy password right away, turn on two-factor authentication, and report the message. Change the same password on any other site where you used it. Then review your sign-in history and payment details in your account.
Which two-factor authentication option should I choose on Etsy?
Etsy offers SMS, phone, and authenticator app options, and its security page says the authenticator app is the more secure choice. Save the backup codes when Etsy shows them, because they appear only once and each works one time.
Should I ship to a new address a buyer sends in Messages?
Ship to the address on the Etsy order. Etsy’s Purchase Protection policy asks sellers to ship to the address provided on Etsy and to be careful when a buyer sends an alternate address through Messages. You can cancel and refund the order and ask the buyer to reorder with the correct address.
Why would a buyer offer to pay more than my price?
An overpayment offer is a classic scam. The buyer sends a payment that later turns out to be fake, but only after you’ve sent back the “extra” with real money. Etsy lists offers to pay more than your asking price as a seller red flag.
Do genuine Etsy security texts include links?
No. Etsy’s security page says genuine Etsy security alerts sent by SMS contain no links. Any text claiming to be an Etsy security alert that includes a link should be treated as suspicious and forwarded to ReportPhishing@etsy.com as a screenshot.
How long does it take to lock down an Etsy account?
Most sellers can turn on two-factor authentication, save backup codes, turn on security alerts, and review sign-in history in about 15 to 20 minutes. After that, a short monthly check of payment details and sign-ins keeps the account in good shape.
Key Takeaways
- Treat any message that tries to move you, your login, or your money off Etsy as a scam until proven otherwise.
- Real Etsy messages sit in the From Etsy inbox with a “From Etsy” badge and come from an “Etsy staff” profile.
- Etsy never asks for your password or your email over Messages and doesn’t offer a customer service phone number.
- Don’t reply to, click, or scan anything in a suspicious message; report it and check your account directly in Shop Manager.
- Turn on two-factor authentication with an authenticator app, save your backup codes, and turn on security alerts.
- Take payment only through Etsy checkout and ship only to the address on the Etsy order.
- If you already clicked, change your password, turn on 2FA, report the message, and contact your bank if money moved.
The Bottom Line
Start today with the 15-minute lockdown: two-factor authentication through an authenticator app, saved backup codes, and security alerts on. Then make the checklist a habit. Check the inbox and badge first, scan for red flags, and never act inside a suspicious message.
Next, protect the money side. Keep every order on Etsy checkout and ship to the Etsy address, so Purchase Protection stays on your side when an order does go wrong. Then check what each protected order earns you: Calculate your Etsy fees per sale and make sure your prices hold up.
Related Articles
- How to Resolve Etsy Cases and Keep Purchase Protection: how real buyer problems work, so you never mistake them for spam
- How to Use Etsy Messages to Answer Buyers and Win Sales: quick replies and message rules for buyers who mean business
- Etsy Chargebacks and Payment Disputes: A Seller’s Guide: what happens when a payment is disputed after the sale
About This Research
Chloe Cruz writes Marketplace Hackers’ guides on Etsy fees, SEO, and store growth, and has spent four years writing about eCommerce.
This article is based on Etsy’s Help Center pages on handling scams and suspicious messages and on account security, Etsy’s Purchase Protection program for sellers and the related Seller Handbook article, and the US Federal Trade Commission’s guidance on fake check scams, checked in November 2026. The worked example is a hypothetical shop used to show the method, not a real seller.
Content reviewed and updated: 2026-11-04
Want More Marketplace Tips?
Join the newsletter — new guides drop regularly.