Etsy Scam Messages Aimed at Sellers: Etsy’s Own Red Flags, and How to Check a Message Is Real

Etsy’s phishing article has a list written for sellers. A message is a warning sign if it asks for your email to complete a purchase, sends a QR code to confirm a purchase, asks you to add items to the order, offers more than your price, reads as if the sender never looked at your listing, or says the buyer won’t go through Etsy checkout. For each one, Etsy’s advice is to report the message without replying. Below is each sign, how to check whether a message really comes from Etsy, what reporting does, and what to do if you already answered.

Sources, all read on 28 October 2026: Etsy’s Help Center articles How to Help Protect Yourself from Phishing Scams (edited 10 June 2026), How to Protect Yourself from Off-Platform Transaction Scams (created 18 September 2026), How to Contact Etsy Support (edited 14 August 2026), How and Why Etsy Scans and Reviews Messages (edited 30 May 2025), How to Make Your Account More Secure (edited 20 July 2026), What to Do if You Suspect Fraud in Your Etsy Account (edited 6 February 2024) and How to Use Square in Your Etsy Shop (edited 19 May 2025); and Etsy’s Off-Platform Transactions Policy (last updated 5 October 2026).

Which messages does Etsy say are scams aimed at sellers?

Etsy’s phishing article gives sellers two overlapping lists naming six signs. The sender asks for your email to complete a purchase, sends a QR code to confirm a purchase, asks you to add items to the order, offers more than your price, asks vague questions that suggest they haven’t looked at your listing, or won’t check out on Etsy.

The add-items sign appears only in the second list; the other five appear in both. On the email request Etsy is blunt: “An email is never required for a buyer to complete a purchase.” A buyer who refuses checkout also takes the order out of Etsy Purchase Protection, which the same list points out. What that protection covers when an order does go through checkout is in Etsy Purchase Protection for sellers: who pays.

The article adds signs that apply to any member, buyer or seller:

• Pressure with a deadline, such as “respond immediately or your account will be suspended”.
• A generic greeting like “Dear Seller”, or little personal detail.
• The same or nearly the same message arriving from different users.
• A QR code to contact support or verify information.
• Unusual formatting, such as mixed fonts and odd bolding.
• An excuse for the missing “From Etsy” badge, such as a claim that the From Etsy folder isn’t working.

How do you check that a message is really from Etsy?

Real messages from Etsy staff arrive in the From Etsy inbox in Messages, with a “From Etsy” badge below the subject line, and the sender’s profile shows an “Etsy staff” badge under the account name. If a message in your regular inbox claims to be from Etsy, Etsy’s instruction is to report it as spam and not reply.

A name proves nothing. In Etsy’s words: “‘Etsy’ as part of the sender’s name isn’t enough to mean it’s really from Etsy.” Two things can look suspicious on a real staff message but are normal, according to the same article: it doesn’t always come with an email notification, and in some cases you can’t reply to it.

If Etsy has taken action on your account, the article says you’ll see alerts in Shop Manager as well as in the From Etsy inbox. So when a message says your shop is suspended, don’t follow its link. Type etsy.com into your browser, open Shop Manager and look. The same article says Etsy will never ask over Messages for your password or other sensitive details such as your phone number or mailing address, and separately that Etsy “will never ask for your email to complete a purchase.”

What about emails, links and phone calls that claim to be Etsy?

Etsy’s Contact Support article says emails from Etsy “will always have /etsy.com/ contained in the sender’s address”, that Etsy has no customer service phone number, and that it phones only after you ask for a call back. The phishing article adds that real Etsy emails send you to sign in to your Etsy account to complete an action.

Treat the etsy.com test as a minimum, not as proof. The phishing article’s three examples of fake Etsy web addresses are etsy.verify, login-etsy.com and etsy.com.@offer, and two of the three contain “etsy.com”. The real addresses it gives as examples are community.etsy.com, help.etsy.com and www.etsy.com/shop/. When a link in a message takes you off Etsy, you see a banner reading “You’re about to leave Etsy”; Etsy’s advice when that banner appears is not to proceed. Forward a suspected phishing email, or a screenshot of a text, to ReportPhishing@etsy.com.

The two articles word the phone rule differently. The phishing article says Etsy “won’t make unrequested phone calls without prior notification”. The Contact Support article says Etsy “will only reach out by phone after you have first requested a call back”, and that phone support can only be safely requested through Etsy’s Contact support form. Both rule out an unexpected call from “Etsy Support”. On support numbers found online, the phishing article says they “are not legitimate” and the Contact Support article says they “may not be legitimate”.

Can you give a buyer your email, or take payment another way?

No. Etsy’s Off-Platform Transactions Policy, last updated 5 October 2026, bans “requesting or sharing contact information (e.g., a phone number, email address, or social media handle) for the purpose of completing a transaction off Etsy”. It also bans naming an off-platform payment method, such as Zelle or cash, and using a QR code to direct members off Etsy.

The ban names both requesting and sharing. If a “buyer” asks for your email so they can pay you outside Etsy and you send it, that is sharing contact information to complete a transaction off Etsy. The policy’s list of payment methods also names Venmo, PayPal and cryptocurrency. The same policy bans off-platform discounts or cheaper shipping offered to move a sale elsewhere, and charging extra after checkout for shipping, duties or any other fee.

Links are a separate question. Etsy’s off-platform scams article says sellers may share links to their own websites and social media, while the policy bans instructing a member to buy through one. For payment, that article names only two routes: Etsy checkout, and Etsy’s approved Square integration for in-person sales. Square connects from Shop Manager under Sales channels, then Sell in person. Cash at a pickup handover is covered in Etsy local pickup and delivery with no tracking.

How do you report a scam message, and what does reporting do?

Report without replying; Etsy says a reply makes a scammer more likely to contact you again. On Etsy.com, go to Your account, then Messages, select the message and choose Report. In the Etsy Seller app, open the message, tap the three dots and choose Mark as spam. In the Etsy app, go to You, then Messages, and choose Report.

Etsy lists what reporting does:

• The message moves out of your inbox into your Spam folder.
• New messages from that member stop reaching your inbox.
• The member can’t reply in the existing thread.
• The member can still buy from your shop.

If you reported a message by mistake, sign in on Etsy.com, open the Spam folder, select the message and choose Not Spam. The ReportPhishing@etsy.com address is for emails and texts only, and it isn’t monitored by agents, so you won’t get a reply.

Etsy also filters on its side. It scans messages with automated tools, partly to detect scams and attempts to send buyers off Etsy to complete a transaction, and says that in some cases it blocks messages. It doesn’t say what share of scam messages it catches.

What should you do if you already replied, clicked or scanned?

If you gave a scammer your account details, Etsy says to report the message, change your Etsy password and turn on two-factor authentication. Change that password on every other site where you used it, including the email account tied to Etsy. If you sent money off Etsy, contact the payment platform, your bank and local law enforcement right away.

Two-factor authentication is required when you open a new shop and optional, though “strongly recommended”, for existing sellers. With it on, Etsy asks for a code when you sign in from a new browser or device, and every 30 days. The code comes by text, phone call or an authenticator app. To turn it on, go to Account settings, then Security, then Turn on 2FA, and save the backup codes Etsy gives you; they let you sign in if you lose the phone or email you set it up with.

One sign-in error looks alarming but is Etsy’s own precaution, shown when you sign in: “Our security team has temporarily limited your access to this account for your protection.” Etsy says it shows this to prevent an account being compromised, that it doesn’t necessarily mean you were hacked, and that resetting your password restores full access.

A quick reference: the message, Etsy’s rule, your move

A buyer who asks in Messages to ship to a different address is a separate risk, and what Etsy says about it is in what to do when a buyer gives the wrong shipping address. And if the time you save on scam messages goes back into listings, the free generator at /generate takes a short product description, plus a photo if you add one, and returns a title, 13 tags and a description.