Spot fake sellers, fake buyers and verification-code account-takeover fraud on Facebook Marketplace — with what UK consumer protections actually apply to peer-to-peer transactions.
Last reviewed: 13 May 2026 · ScamSupport research
Why Facebook Marketplace fraud is harder to recover from than bank-impersonation fraud
Facebook Marketplace is the UK’s largest peer-to-peer commerce platform after eBay. Report Fraud’s 2025 reporting showed online-purchase fraud as the largest consumer scam category by volume (over 32,000 reports), and Facebook Marketplace consistently appears as the dominant venue. The scam patterns differ from bank-impersonation fraud in one critical way: there is no central recovery framework. The PSR Mandatory Reimbursement Scheme covers authorised push payments to fraudulent recipients, but its application to consumer-to-consumer Marketplace disputes is contested by banks, and Meta itself offers no transactional buyer protection on Marketplace.
Practical implication: prevention is the recovery strategy. Read on for the three dominant 2026 scam patterns, the verification rules that defeat them, and a clear-eyed view of what to do if you’ve already paid.
Three Facebook Marketplace scam variants currently in circulation
Variant 1 — Fake seller: item never ships
How it presents: a listing for an in-demand item (PS5 / iPhone / designer bag / concert ticket) at a discount of 30–50% off market. The seller’s profile is recent or sparse. They will request payment by bank transfer (“to avoid PayPal fees”) or via PayPal Friends & Family. After payment, communication stops or the item never arrives.
Red flags:
Bank transfer demand. Bank transfer for a Marketplace purchase from a stranger is the single most diagnostic red flag — it strips you of Section 75, of card-scheme chargeback rights, and of PayPal Buyer Protection in one move.
PayPal Friends & Family. PayPal Buyer Protection only applies to Goods & Services payments. Friends & Family transfers are explicitly excluded by PayPal’s own terms. Scammers ask for Friends & Family precisely because it disables the recovery mechanism.
Discount of 30%+ on in-demand items. Genuine sellers of in-demand items don’t leave significant money on the table. A £700 PS5 for £400 has only one rational explanation.
Recent or sparse profile. Real seller profiles tend to have 6+ months of history, profile photos, mutual friends, and visible activity. Scam profiles are often created days before the listing.
Refuses in-person handover. “I’m moving abroad / based in Aberdeen / can’t meet” is a stock excuse to force a remote payment.
Variant 2 — Fake buyer: overpayment / wrong-amount transfer
How it presents: You’ve listed something for £200. A “buyer” messages enthusiastically, agrees to your price, then says they’ve accidentally transferred £2,000 instead of £200, with a screenshot of what looks like a bank confirmation. They ask you to refund the £1,800 difference urgently, often while the “buyer” is travelling or unable to call.
Red flags:
The screenshot is fabricated. No money ever actually arrives in your account. Always check your real bank balance (in your app, not the screenshot) before refunding anything.
Reverse transfers do exist. Even if money does briefly appear, banks can reverse fraudulent or compromised transfers up to several days later. If you refund a fraudulent buyer, your refund is real and the original credit gets clawed back.
Time pressure. “I’m about to board a flight” / “I have to leave for surgery” are scripted to make you act before checking your bank.
Identical-amount overpayments. Real accidental overpayments tend to be slightly wrong (e.g. transposed digits). Overpayments of exactly 10× the listing amount are scripted.
Variant 3 — Verification-code account takeover
How it presents: A “buyer” messages about your listing and says they want to verify you’re a real seller “because there are so many scammers”. They claim they’ll send you a Google Voice / WhatsApp / Telegram verification code, and ask you to read the code back to them. Sometimes phrased as “just text the 6-digit code I sent to your phone”.
Red flags:
The code is not verifying you to them. It is the SMS code Google Voice (or another service) is sending to register a new account using your phone number. The instant you read it back, the scammer has taken over your phone number on that platform.
Why does this matter? Once the scammer has a Google Voice number linked to your phone, they use it to verify scam accounts on dating apps, on banks, on social-media sites — with police investigations tracing back to YOUR number.
No legitimate buyer needs a code. Marketplace itself does the buyer-seller verification implicitly through profile signals. Any “extra verification” via code is the scam, full stop.
Same pattern via “Marketplace Verified Seller”. Some variants frame it as Facebook Marketplace requiring an extra check. Facebook does not send verification codes through SMS to confirm you to a buyer.
The verification rules that actually defeat Marketplace scams
For buying: in-person handover, cash on collection, or PayPal Goods & Services only. These are the only three payment routes with practical recovery options for Marketplace purchases. Bank transfer for a Marketplace deal with a stranger is a complete loss of all consumer protection.
For selling: confirm payment is in your account before releasing the item. Open your bank app, not the screenshot. Wait for the credit to actually settle (Faster Payments usually <2 minutes; international transfers can take 1–3 days and can also be reversed).
Never share an SMS code, even one you receive, with anyone. All legitimate verifications happen IN the app. If a code arrives on your phone and someone is asking you to read it back, you are mid-scam.
Check the buyer/seller profile properly. Click into the profile. Are there public friends? Was the account created in the last week? Are there real photos or stock images? A 2-week-old profile asking for a bank transfer is almost certainly a scam.
Use PayPal’s Goods & Services flow for the small fee. PayPal G&S costs a few percent but gives genuine Buyer Protection with a documented dispute path. Friends & Family is a peer transfer with no protection — treat it as cash.
If you’ve already lost money on a Marketplace scam
Recovery depends entirely on the payment route. The hierarchy:
Paid by UK bank transfer: Use the PSR Claim Wizard. The PSR Mandatory Reimbursement Scheme is contested by some banks on consumer-to-consumer cases, but a properly framed APP fraud claim (“I was deceived into authorising a payment for goods that were never delivered”) has a strong success record. Banks have 5 working days to investigate and 35 working days for complex cases.
Paid by credit or debit card: Use the Chargeback & Section 75 Generator. Credit-card purchases of £100–£30,000 are protected by Section 75 of the Consumer Credit Act 1974; debit cards by Visa / Mastercard scheme chargeback rules.
Paid by PayPal Goods & Services: Open a dispute in your PayPal account within 180 days. PayPal Buyer Protection covers non-delivery and not-as-described claims. Provide screenshots of the listing, the payment, all messages, and the missing-item evidence.
Paid by PayPal Friends & Family, bank transfer to a personal account, or cash: Practical recovery is very limited. Report to Report Fraud on 0300 123 2040 and to Facebook (Settings > Help > Report a problem). Both create intelligence records but do not refund money. If the loss is substantial (over £3,000) consult an SRA-regulated solicitor.
Account-takeover via verification code: Contact the affected platform’s recovery flow immediately. For Google Voice / Google account: accounts.google.com/signin/recovery. For WhatsApp: uninstall, reinstall, and re-verify via SMS to reclaim the number. For Telegram: log in via SMS and revoke other active sessions. Change linked-account passwords (email, banking) and enable 2FA on all of them.