What to do in 60 seconds if something does not add up
Reduce your exposure to risk before trying to work out whether the other person “can be trusted”.
How phishing around Vinted works
The goal is usually to take you out of the official flow to obtain credentials, payment details or a transfer.
Message, SMS, email or a supposed buyer.
“Verify”, “get paid now”, “last step”.
A link, a QR code or a request to continue elsewhere.
A fake page asks for credentials or a card.
A compromised account or a payment outside the flow.
Signals before buying or selling
Combine context and behaviour; do not turn a single profile characteristic into a verdict.
External payments, QR codes and sensitive data
If the supposed process requires you to go to another website to “receive” a Vinted payment, stop and check it from the app.
Phishing attempts can imitate login pages, courier messages or payment forms. Do not use a link you received to log in; open Vinted yourself. Do not share your CVV, SMS codes, passwords or online banking credentials either.
You are asked to pay or enter details outside the official flow
Do not continue under pressure. Verify the order from Vinted. If it does not exist there, do not treat the external message as a valid instruction.
Barguvo can help you structure what you have observed without automatic accusations.
Profile, ratings and badges: useful but limited
They serve as context, not as certification of the product or a guarantee that a future transaction will be safe.
It may show previous experience, but it does not prove the condition of this item.
It helps account security; it does not automatically authenticate every product.
Assess them together with the description, evidence and payment flow, not in isolation.
If you have already been caught out or have shared data
The priority shifts from prevention to containment: protect accounts, payments and evidence.
If you entered your password on a suspicious website, change it from the official site and check the security of your email. If you shared card details or made a transfer, contact your bank or payment provider to find out what measures are available. If the problem is linked to a real transaction on Vinted, use the order’s channel and do not wait for a critical deadline to expire.
Reporting and keeping evidence without overexposing
Vinted offers channels for reporting a listing, profile, message or review; keep what you need to explain the incident.
Reporting, buying and managing the order are done on Vinted.
Risk scenarios: how to act without turning suspicions into accusations
The response depends on the action requested, the evidence available and whether the transaction really exists within Vinted.
“I have bought something, but I am getting an SMS from the courier”
A logistics message may or may not be legitimate. Do not use the link in the SMS as your starting point. Open Vinted and check the tracking linked to the order. If the courier needs a real action, verify the domain and go in by typing the official address yourself or from the order information. A matching name or logo in an SMS is not enough.
“I am a seller and I am told I have to enter my card to get paid”
Check whether the sale exists in your account. Someone sending you a screenshot, an email or a page imitating Vinted does not create a transaction. If the supposed payment requires entering details outside the flow you see in your account, stop. Do not share SMS codes or banking credentials to “unlock” a payment.
“The profile has 200 ratings, so it must be safe”
Ratings can reduce part of the uncertainty about past activity, but they do not authenticate the item and do not remove the risk of a compromised account. Review the specific listing: consistency of photos, description, price, behaviour and payment flow. One positive signal does not cancel out material negative signals.
“The price is too good”
A low price does not equal a scam. There may be urgency, lack of knowledge, a worse condition than expected or simply a competitive seller. What changes is the level of checking it deserves: ask for additional photos if any are missing, review authenticity details where appropriate and do not let the bargain push you out of the official flow.
“They are asking me to use WhatsApp because the app is not working”
An external conversation reduces the context available within Vinted and is especially problematic if links or payments appear later. If the aim is to resolve an order, keep the material information on Vinted. You do not need to declare fraud to decide that you do not want to continue outside the platform.
False positives and false negatives
A new user may be completely legitimate; a long-standing user may have a compromised account. Poor wording may just be a language barrier; perfect wording may be copied. An invoice may be authentic and not correspond to the item; the absence of an invoice may be normal for an old object. That is why Barguvo does not assign an automatic verdict to a single signal.
Verify the listing, the evidence and the flow. The best prevention is not to create a transaction outside Vinted under pressure.
If the purchase exists on Vinted, use the order and its deadlines. If you paid outside, the situation changes and may require your bank/payment provider.
What to keep and what not to
To report, it is usually enough to keep the relevant message, the URL or identifier, the date/time and the context explaining why it concerns you. You do not need to download entire profiles or publish names, phone numbers or documents. Data minimisation protects people and makes the evidence clearer.
Barguvo’s decision model for safety
Prioritise reversible actions and checks within the platform before drawing conclusions about another person’s intent.
When a signal appears, the first question is whether you can verify the fact without exposing yourself: opening the app instead of the link, checking that the order exists, reviewing the domain, asking for a specific photo or confirming the shipping status. The second question is what it would cost you to be wrong. If an action asks for a password, an SMS code or a transfer, the potential cost is high and stopping is reasonable even without proving fraud.
UNKNOWN means a piece of data is missing: for example, you do not know whether a photo really belongs to the seller. INCONCLUSIVE means you have evidence, but it is not enough to settle the hypothesis: for example, two images look similar but you cannot prove that one was stolen. This distinction stops the guide from turning uncertainty into accusation.
If there is already an order issue, the job changes. Do not keep collecting “scam signals” when the urgent thing is to tap «Tengo un problema» within the deadline. Safety prevents and contains; returns manages the transaction; authenticity examines the nature of the item. Separating those jobs reduces errors.
Safe checks that do not require trusting links you have received
When in doubt, switch verification channel instead of going deeper into the channel that might be manipulated.
If you receive an email saying your account is blocked, open Vinted from a bookmark or type the address yourself. If you receive a shipping notice, check the order first. If someone claims to have paid, look for the sale in your account. This simple rule prevents the check itself from depending on the suspicious message.
It is also worth separating the identity of the person from the identity of the item. A profile may be real and the item poorly described; an account may have been compromised; a photo may be the seller’s own and still not prove authenticity. That is why the assessment is done in layers.
Time pressure is especially dangerous when it tries to eliminate a check: “you have five minutes”, “if you do not confirm you lose the money”, “scan now”. A real urgency should be verifiable within the official flow. If you cannot verify it, stopping is a proportionate decision.
When the user has already shared data, the guide stops asking “could it be a scam?” and prioritises concrete actions: changing the password, closing sessions, protecting email, contacting the bank or payment provider and reporting. You do not need to prove the attacker’s intent to protect an account.
Finally, avoid turning safety into surveillance of other users. Do not collect personal photographs, social media or private information to try to “investigate” the seller. The check must be proportionate to the risk of the transaction and focus on the item, the flow and the relevant signals.
What a safety signal can and cannot prove
a single signal rarely settles the diagnosis; combine context, evidence and the real flow of the transaction.
An old account, many ratings or a carefully kept profile can reduce uncertainty, but on their own they do not authenticate the item or make an external link safe. Likewise, a new account, few ratings or a slow reply do not prove fraud. Barguvo must distinguish between a signal that increases or reduces risk and a conclusion that would require additional evidence.
The strongest signal is usually the consistency of the flow. If a supposed purchase requires leaving Vinted, entering bank details on a page received by message, scanning a QR code to “get paid” or providing authentication codes, the problem is not that the profile looks suspicious: it is that the action requested does not fit the official process you should be able to start from your account or order. In that scenario, go back to the app or to the website by typing the address yourself and check whether the action exists there.
Also separate risk from authenticity. A product may be authentic and the conversation a payment scam; a conversation may go smoothly and the product still need verification. That is why this guide links to authenticity when the question is “is this item real?” and to returns when there is already a transaction with a problem. Mixing the three jobs produces conclusions that are too strong.
If you keep evidence, apply the minimum necessary: capture the relevant message, URL or context of the transaction, but avoid collecting or sharing full documents, card numbers, addresses or personal data that are not needed to explain the incident. If sensitive data has already been exposed, the priority becomes protecting the account or payment method and using the corresponding official channels.
Finally, a prevention guide cannot guarantee “zero scams”. Its role is to improve decisions: identify diversions from the official flow, reduce data exposure, keep useful evidence and know when to stop a transaction. When the evidence remains ambiguous, the correct outcome may be “inconclusive” rather than labelling someone a scammer.
FAQ
Will Vinted ask me to pay outside the app?
For orders made through Vinted, use Vinted’s purchase and payment flow. An external request for payment or “verification” should be treated as a risk signal.
Can a profile with many ratings be a scam?
Ratings provide context, but they do not guarantee a future transaction or authenticate the specific item.
What should I do if I have scanned a QR code?
If you only opened it, close the page and do not enter any data. If you shared credentials or payment information, change your passwords and contact the relevant provider.
What should I do if I have shared bank details?
Contact your bank or payment provider as soon as possible and follow their instructions. Do not wait to confirm whether the message was fraudulent.
How do I report a message or listing?
Use Vinted’s reporting options for the relevant content and keep the minimum evidence necessary.
Does a very low price mean a scam?
Not on its own. It is a signal that justifies checking condition, item identity, evidence and payment flow more carefully.
Operational information revalidated on 25/08/2026. The details Vinted shows in the app or checkout —costs, eligibility, carriers, categories and deadlines communicated in a specific order— prevail when they are more specific.