Scammers operate on every classifieds platform, trying to steal money or payment data from sellers and buyers. This page explains how the most common phishing attempts work and how to protect yourself.
How the typical scam works
- A fake buyer contacts you shortly after your listing goes live, often in a great hurry and without asking anything about the item.
- They propose handling payment or shipping via an alleged "courier service" or "secure payment service".
- They send you a link or QR code (via chat, SMS, e-mail or WhatsApp) to a page imitating a well-known service, where you are asked to enter your credit card details "to receive the payment".
- Whoever enters their details receives nothing: the scammers use the card to withdraw money.
The golden rules
- As a seller, never share your credit card details to receive a payment. Receiving money never requires the full card number, expiry date or CVV code.
- Never share your credentials or credit card data, neither by phone nor on a website you reached via a received link or QR code.
- To log in to a service, always type the website address manually into your browser.
- Always check that the website you are visiting matches the official address of the service provider.
- Stay vigilant when scanning QR codes.
- Ibex Arms offers neither delivery nor payment services: transactions take place exclusively between sellers and buyers. Therefore, do not click on any link and do not scan any QR code received from other users via chat, SMS, e-mail or WhatsApp.
More warning signs
- The other party immediately wants to move the conversation to WhatsApp, Telegram or e-mail.
- They offer more than the asking price or buy without negotiating and without seeing the item.
- They put pressure on you: "I must close the deal today", "I'm leaving tomorrow".
- They ask for an advance payment (Twint, bank transfer, gift cards) to "reserve" the item.
- Messages in unnatural or error-ridden language, often machine-translated.
What we do
- The Ibex Arms chat automatically blocks links: no user can send you links to payment pages or external websites.
- Listings reported by multiple users are automatically hidden pending review.
- Every listing has a "Report listing" button: use it whenever something feels off. Reports are anonymous.
Fell victim to a phishing attempt?
- Contact your bank or card issuer immediately and have the card blocked.
- Change your Ibex Arms password right away, along with any other service using the same password.
- Report the incident to the Swiss National Cyber Security Centre (NCSC) and, in case of financial loss, file a complaint with the police.
- Report the listing or user involved to us: we act quickly.