Wallapop scams: types, signals and patterns when buying and selling
A single signal does not prove a scam. Risk increases when several things shift in the same direction: the conversation leaves the expected flow, urgency appears, a link or receipt replaces the real status, money or information that does not fit is requested, and the next action is hard to reverse.
Barguvo organises signals and information gaps. It does not certify people, accounts, listings or products, and it cannot guarantee that a transaction is safe.
In this guide
What is happening?
Use these routes to reach the pattern that most resembles your situation. They are not verdicts.
How to read the evidence in this guide
The label shows what kind of backing a statement has. Not all clues carry the same weight, and no label replaces your own check.
Documentation from Wallapop, INCIBE, CEC-España or other bodies on channels, payments, phishing and how to respond to incidents.
Example: Wallapop documents as a warning sign that the transaction is diverted to external payments or shipping.User accounts that help uncover real sequences, questions or friction. They do not estimate frequency or prove intent.
Example: sellers who receive a screenshot or SMS of an alleged payment while the app shows no sale.A synthesis that combines signals and gaps to decide what to check before the next irreversible step.
Example: an account with a good history reduces contextual uncertainty, but it does not replace checking the current payment.Popular claims that should not be turned into a conclusion about safety or fraud.
“If they send their DNI it is safe”, “old account = safe” or “if it is still listed, Wallapop has already verified it”. A clue, not a conclusion.RISK MAP
Eight patterns that can appear alone or mixed
By the end you will have: a map of scam types to identify the point at which a transaction changes, without relying on specific words, logos or screenshots.
Impersonation and links
The conversation moves to WhatsApp, email, SMS or a page imitating Wallapop, a carrier, a bank or a payment service. The goal may be to obtain credentials, card details, codes or money.
Payment or shipping outside
Someone proposes changing the payment or delivery channel to close faster, save a fee or “simplify”. The change does not prove fraud, but it alters traceability, protection and the ability to resolve problems.
Reverse Bizum or fake refund
A money request is mistaken for an incoming payment, or someone claims to have sent you money by mistake and asks you to return it without you having checked the real deposit and amount.
Fake payment confirmation
A screenshot, SMS, email, cloned page or forwarded message claims that the sale has been paid. The visual proof is meant to replace the status that should appear in the corresponding service.
Deposit, reservation or advance payment
An attractive item is combined with urgency, scarcity or the promise of a reservation, and money is requested before you can sufficiently verify the product, person, delivery or terms.
Item, parcel or after-sales
The contents, condition, accessories, packaging or delivery do not match what was agreed; or a problem appears afterwards and there is an attempt to move compensation outside the resolution mechanism used.
Account, identity or support
Reputation, an ID document, a verified phone number, a profile photo or the appearance of support are used to settle doubts. They are context signals, not a guarantee of who controls the session or of what will happen in the current transaction.
In-person meeting
Change of place, inability to inspect, haste, payment that is hard to verify or terms different from those agreed. The core problem is losing control over checking, payment or handover.
In June 2026 Wallapop announced that the most common pattern detected on its platform during 2025 consisted of taking payments or shipping outside the app. The platform also warns about fake links sent by WhatsApp or email that appear to be needed to confirm a sale or receive money.
The chain matters more than a single word
Normal conversation or first change of channel.
Urgency, scarcity, emotion or an excuse to skip a check.
Link, payment, shipping, support or compensation moves to another flow.
Money, a code, a credential, card details, shipping or a refund is requested.
YOUR ROLE CHANGES THE PATTERN
Buyers and sellers are not deceived in the same way
The same transaction can carry different risks depending on who has to pay, ship, hand over or accept a problem.
Questions that usually matter to the buyer
Do not look for a “scammer profile”. Look at what step you are being asked to take before you can check what you need.
- Deposit or advance payment: are you being asked to reserve before seeing, receiving or sufficiently verifying the product?
- Price and scarcity: is the urgency trying to close the transaction before you compare or ask a basic question?
- Product: does the evidence address identity, condition and accessories, or does it only create a convincing visual impression?
- Payment: is the method or channel being changed for a reason that reduces traceability or protection?
- Delivery: do the terms change after you pay or when it is already hard to back out?
Questions that usually matter to the seller
The seller can also be the target. A “purchase” can be used as a pretext to ask for data, trigger an outgoing payment or get you to ship before you have actually been paid.
- WhatsApp/SMS: are you being taken out of the chat just before receiving a confirmation or link?
- Bizum: are you receiving money or authorising a request?
- Receipt: does the screenshot say “paid” while the real status does not change where it should?
- Shipping: are you being pressured to hand over before the sale flow confirms the next step?
- After-sales: does a problem lead to external compensation without exhausting the corresponding dispute or support mechanism?
“Someone else is interested; if you send me a deposit I will hold it for you.” The deposit alone proves nothing. The risk increases if, in addition, you cannot verify the item, an external channel is required and the urgency prevents you from checking.
“I have already paid; look at the SMS/screenshot.” The receipt should not become a substitute for the real status of the transaction.
A supposed agent, carrier or bank uses the real context of the transaction to ask for an action you did not expect. Knowing details does not prove identity.
A real or alleged problem ends in a proposal to pay by another route. The useful question is whether the new step preserves evidence, traceability and a resolution mechanism.
In 2026, public questions keep appearing from sellers who receive WhatsApp messages, SMS or screenshots of an alleged payment while the transaction does not appear as confirmed in the app. These stories justify explaining the pattern; they do not make it possible to measure how many attempts there are or to automatically identify the intent of a specific person.
Before an irreversible step, ask what evidence would be normal if the transaction were legitimate. The goal is not to “prove fraud”; it is to prevent a screenshot, an urgent story or a change of channel from replacing a check of the fact that really matters.
COMBINED SIGNALS
A clue is not proof: look for consistency across several signals
A low price, a recent profile, poor spelling, haste or few reviews can raise doubts. None of them proves fraud on its own.
| Observed fact | If it appears alone | When combined | Cautious reading |
|---|---|---|---|
| Leaving the chat | Reduces traceability | WhatsApp + link + request for card/code | Return to the official channel and check the step |
| Very low price | It can have several causes | Urgency + advance payment + no chance to check | Do not pay just so as “not to miss the opportunity” |
| New profile | Little history | Shifting story + pressure + external payment | Demand better evidence for the specific step |
| Many reviews | Favourable historical context | Still asks for a link, code or anomalous payment | Reputation does not cancel out the transactional signal |
| DNI / invoice / document | Provides information | Used to avoid any other check | Do not treat it as a certificate of intent |
| “Paid” screenshot | Image of a claim | The app/bank do not reflect the expected fact | The real status prevails over the screenshot |
COMBINATION
WhatsApp + link + request for card/code.
READING
Return to the official channel and check the step.
COMBINATION
Urgency + advance payment + no chance to check.
READING
Do not pay just so as “not to miss the opportunity”.
COMBINATION
The real status does not change where it should.
READING
The screenshot does not replace verifying the status.
A deposit or reservation deserves its own context
A deposit can exist in legitimate agreements between private individuals. The problem arises when it becomes the mechanism that removes the possibility of checking. Think of a sequence: an especially attractive product, someone else “about to take it”, a viewing that is postponed or impossible, a request for money outside the platform and little ability to recover context if something goes wrong.
Do not turn “they are asking for a deposit” into “it is a scam”. Turn the deposit into a question: what will I be able to verify before sending money, and what mechanism exists if the item, the person or the terms are not as expected?
A good risk reading must be able to explain both why a chain is worrying and why a single signal still allows for innocent alternatives. If all you can do is add up suspicions, you will end up generating false positives.
Asks for WhatsApp for a video
Wallapop recommends staying in its chat and lets you add more photos to the listing. Even so, the request alone does not prove fraudulent intent. The signal changes weight if a link, payment, code or pressure appears afterwards.
The payment does not appear immediately
A glitch or pending status can happen. Do not resolve it by shipping the item because someone shows a screenshot: let the corresponding service reflect or resolve the status.
Has no reviews
It may simply be a new account. Replace the lack of history with better checks on the product and the transaction, not with an accusation.
Gets a detail wrong
An isolated mistake is not proof. If the answers change repeatedly just when you ask about payment, product or delivery, then the accumulated inconsistency does deserve more weight.
A risk guide would be poor if it only taught you to add up suspicions. You also need to recognise uncomfortable situations that can occur without any fraud. A buyer may ask for a video because they want to hear a noise or see a defect; a payment may stay pending because of a technical problem; a new person may have no ratings; a seller may be slow to reply or get a measurement wrong.
The odd can also have an innocent explanation
Bizum: two different tricks that get confused
Reverse Bizum
CEC-España and INCIBE document the pattern in which a supposed buyer sends a money request instead of a payment. The victim thinks they are accepting an incoming payment and is actually authorising an outgoing one.
Fake refund
CEC-España also describes the case in which someone claims to have transferred money by mistake and asks for it back. The key check is to verify whether the deposit really happened and whether the amount matches before moving any funds.
Stable rule: “I got something from Bizum” is not the same as “I have been paid”. Distinguish between an incoming payment, a request and any authorisation required from your own bank.
“If Bizum shows a name, I am already protected” is not a guarantee. A visible detail can provide context, but it does not prove which product you will receive, who controls the whole transaction or that the next step can be undone. A clue, not a conclusion.
DO NOT MIX RISKS
Four layers: product, condition, counterpart and transaction
A transaction can be strong in one layer and weak in another. Separating them avoids trusting too much (or accusing too soon) because of a single signal.
Does the product exist and match the model, variant or reference listed? A convincing photo does not guarantee possession or authenticity.
Do the wear, functioning, accessories and defects match what was promised? An authentic product can arrive in a different condition.
Who appears to control the conversation? History and verification provide context, but they do not replace checking the current transaction.
Do the money, the shipping and any possible problem follow a verifiable flow consistent with what was agreed?
The guide how to tell if a Wallapop listing is fake goes deeper into the first layer: listing, photos, price, product and evidence. RISK does not duplicate it; here we are interested in how those signals mix with account, payment and delivery.
Pinpoint exactly where the transaction changes
Contact
Does the conversation start within Wallapop and then need to move elsewhere? Ask what the transaction gains from that change and what traceability you lose.
Payment
Does the method, link or receipt match the expected flow? Do not use a forwarded image as a substitute for the real status.
Delivery
Are the product, parcel, place and terms still those agreed? Check whether the change happens just when you have already paid or shipped.
After-sales
If a problem arises, are the same evidence and resolution mechanism kept, or is there a proposal to move money outside?
Who claims to be contacting you is not verified by the logo either
They can ask questions or negotiate, but they do not need you to reveal credentials or card details to complete a normal sale.
A person presenting themselves as an agent in a normal chat, on WhatsApp or by phone is not verified by the name they use.
A message can use real delivery details to seem legitimate. Start the check yourself from the official flow or channel you know.
A page or SMS that looks like your bank is no substitute for checking the transaction in your bank’s app or website, opened by you.
Wallapop states that it does not contact its users by WhatsApp and warns of people posing as agents, notifications or other parts of the service. It also recommends keeping the conversation in its chat and being wary of external links or confirmations.
CASES TO REASON THROUGH
Eight situations: which signal matters and what you cannot conclude
These cases teach you to separate fact, interpretation and the next check. They are not automatic diagnoses.
1. “Give me your phone number and I will send you the link”
Signal: leaving the chat + link. Does not establish: who is behind it. What changes: return to the official flow and check whether that link was needed for the real step.
2. “I have already paid you; look at the SMS”
Signal: external receipt with no change in the transaction. Does not establish: that every SMS is fake. What changes: do not ship because an image says “paid”; verify the real status.
3. New profile + very low price
Signals: little history and price. Do not establish: fraud. What changes: demand better evidence of the product, terms and payment before going ahead.
4. Old account + many reviews
Signal: favourable history. Does not establish: that the current session is safe or that the payment is confirmed. “Old account = safe” is still a shortcut, not a guarantee.
5. Bizum to “receive” money
Signal: a request appears that requires your authorisation. What changes: before accepting, work out whether you are receiving or sending funds. CEC-España and INCIBE document this trick.
6. A deposit to reserve before meeting
Signal: money before the check. Does not establish: that every reservation is fraudulent. What changes: assess what you can verify beforehand and what happens if the viewing, delivery or product does not exist as you expected.
7. The parcel or condition does not match
Signal: objective discrepancy. Does not establish: fraudulent intent; there may be an error, damage or disagreement. What changes: document it and use the corresponding problem mechanism before improvising parallel payments.
8. “I will compensate you by Bizum” after a problem
Signal: the money leaves the resolution flow. Does not establish: that the proposal is malicious. What changes: check whether accepting that route changes evidence, rights, traceability or the status of the dispute.
Very convincing photos or videos do not settle the proof either
In March 2026 INCIBE documented a buying-and-selling scam in which AI-generated images and videos were used to make a high-value transaction look real. The lesson is not “AI = scam”. The lesson is more general: an image can show what some content looks like, not necessarily who owns the object, when it was recorded or what will happen at delivery.
If your doubt is about a specific listing, go deeper in FALSE. If what you need is to know which checks to make before the next step, go to PREVENT. RISK stays focused on interpreting patterns.
The most useful question is not usually “does this look odd?”. It is “what important fact am I taking as proven without having verified it in the right layer?”. That question reduces both false positives and overconfidence.
APPARENT TRUST
Reassuring things can also mislead you if you turn them into a guarantee
Safety cannot be inferred from a single positive signal. Some evidence reduces uncertainty, but it does not remove the need to check the current step.
Old account, verified phone or many reviews
These serve as historical context: they indicate that there is an account with a certain track record or verified details. They do not show who controls the session today or that a specific link, payment or delivery is legitimate. Wallapop recommends unique passwords, changing them immediately if you suspect unauthorised access, and verifying your details to help protect and recover the account.
The cautious interpretation is gradual: a good track record can reduce a doubt, but it does not make a request for card details, a code or a payment that does not fit the expected flow normal.
A DNI, invoice or document does not certify intent
A document can be authentic, stolen, someone else’s, incomplete or simply irrelevant to the next step. Nor do you need to collect personal data to feel safe. If the document adds value, use it for a specific check and minimise exposure of sensitive information.
“Wallapop has not removed it, so it must be safe”
Moderation reduces risk, but it does not turn every visible listing into a certified transaction. Wallapop states that it detects and preventively blocks a large proportion of potentially fraudulent content; that figure describes its own systems and a specific period, not an individual guarantee.
“I got a notification with the right logo”
Design, colour, sender name or a screenshot can be imitated. Do not memorise pixels as your main defence. The check most resistant to change is to open the expected channel yourself and verify the status of the transaction there.
“If they send their DNI they cannot scam me”, “if they have five stars there is no need to check” and “if it appears on Wallapop it has been validated” are conclusions that are too strong. They can be context signals; they do not replace checking product, condition, counterpart and transaction.
The more irreversible the action (paying, shipping, handing over, sharing credentials or returning money), the higher the quality of the specific evidence for that step should be. General reputation should never be the only justification for skipping it.
IF IT HAS ALREADY HAPPENED
Stop the next move and classify the incident
We do not promise recovery here. The aim is to preserve evidence, avoid a second loss and take each incident to the channel that can actually act.
- Do not keep paying, shipping or returning money just to “unlock” the transaction or recover what was lost.
- Keep evidence: conversation, profile, listing, receipts, links, emails, SMS, photos of the parcel and any relevant time-stamped data.
- Check your account if you shared a password, code or data that could allow access.
- Use the appropriate official channel for a dispute, support, your bank or a police report, depending on what happened.
Wallapop recommends cancelling the card, filing a police report and disputing the charges with the bank. Also follow your bank’s instructions.
Wallapop recommends going to your bank to find out about possible ways to claim. CEC-España also advises contacting the bank before returning an unrequested deposit.
Wallapop help recommends gathering information and filing a police report. Do not assume that a bank transfer has the same dispute mechanism as an integrated payment.
If the problem relates to a purchase handled by the payment and shipping system, use the dispute or support mechanism indicated for that transaction.
Wallapop recommends reporting it to the competent authorities. Keep all the information about the transaction that you can provide.
Change the password, review access and recovery options and follow the official account protection help. Do not wait to confirm a financial loss before securing access.
The exact routes depend on the method, country, entity and status of the case. This guide organises decisions; it does not replace platform support, your bank, the police or professional advice.
Barguvo can organise price, signals, missing information and risk without issuing a safety certificate.
FAQ
How can I tell if someone is trying to scam me on Wallapop?
There is no single signal that lets you know for certain. Look for combinations: leaving the chat early, external links or receipts, urgency, requests for money/data that do not fit and changes of terms just before an irreversible step. Check the important fact in the channel that should reflect it.
Does a new profile mean it is a scam?
No. A new profile has less history, but that does not prove fraud. Raise the quality of your checks on product, terms and payment, especially if it is combined with pressure, inconsistencies or channel diversions.
Does an old, verified account with reviews guarantee safety?
No. It provides historical context, but it does not show who controls the current session or that a specific transaction is correct. Check the current step independently.
Is asking for a deposit to reserve a product always a scam?
No. A deposit is a risk pattern when it is combined with little ability to verify, urgency, external payment or terms that make it hard to recover traceability. The useful question is what you can check before sending money and what happens if the transaction does not go ahead.
How does reverse Bizum work?
The supposed buyer sends a money request instead of a payment. If the seller authorises it believing they are getting paid, they end up sending money. Always distinguish receiving from requesting and verify the transaction from your bank.
What is the fake Bizum refund?
Someone claims to have sent you money by mistake and asks you to return it. Before moving funds, check with your bank whether the deposit really happened, whether the amount matches and what procedure applies.
Does a screenshot or SMS prove the buyer has already paid?
Not on its own. An image proves that an image with that content exists. The relevant check is whether the status of the transaction or the deposit really appears in the service where it should.
Can Wallapop message me on WhatsApp to confirm a sale?
The official help states that Wallapop does not contact users by WhatsApp and warns about people posing as employees or administrators. If in doubt, open the official channel yourself.
Do AI-generated photos or videos prove that the listing is fake?
No. AI can reduce the evidential value of an image, but it does not prove fraud on its own. INCIBE has documented cases where AI-generated content supported a scam; the right response is to ask for specific, verifiable evidence, not to accuse automatically.
If Wallapop has not removed the listing, does that mean it is safe?
No. Moderation systems reduce risk, but a visible listing is not an individual certification. Keep up your checks on the product, counterpart and transaction.
What do I do if I have already paid or shared data?
Stop any further moves, keep evidence and classify the incident. If it was an internal payment, use the corresponding dispute mechanism; if it was a card, Bizum or a bank transfer, contact your bank and follow the applicable official routes. If you shared credentials, protect the account immediately.
Does RISK replace the prevention or fake listing guides?
No. RISK explains scam types and how to interpret signals. PREVENT focuses on checks before the next step and FALSE on auditing a specific listing. The separation avoids duplication and takes you to the guide that matches your question.
Organise signals, gaps and checks before paying, shipping or accusing.