TL;DR: You sell something on Trade Me. The "buyer" wins, then you get an email posing as Trade Me, NZ Post or a bank asking you to "finalise the sale" by confirming details through a link. The fake site wants your card details, banking login or Trade Me password. Trade Me says it never asks for your Trade Me login, credit card details or banking password. Turn on MFA and allow bids from authenticated members only.
How it works
From Trade Me’s help centre:
- A scammer wins your listing.
- You receive an email posing as Trade Me, NZ Post or a bank.
- It asks you to "finalise the sale" by confirming your details.
- A button or link leads to a fake site asking for card details, banking logins or your Trade Me login.
It’s the PayID trick from across the Tasman with a Kiwi accent (Australia’s version).
Warning signs
- The sender isn’t Trade Me (NZ Post or a bank "about your sale")
- The address doesn’t end in a Trade Me domain
- Urgency or threats: "your sale will fall through"
- Stiff, formal or poorly written language
- Low-quality or misplaced logos
What Trade Me actually does
- It never asks for your Trade Me login, credit card details or banking password.
- Its support team may contact you to confirm bank account details or identity, but never asks for passwords.
- After a sale, Trade Me emails you the buyer’s details so you can send or arrange pickup. That’s it.
Protect your listings
- Turn on multi-factor authentication on your Trade Me account.
- Tick "Allow bids from authenticated members only."
- Don’t click links in sale-related emails; log in through the app.
- Ask a friend for a second opinion when something feels off.
The courier-link version
Police warned in December 2024 about scammers posing as buyers on Trade Me and Facebook Marketplace, RNZ reported. The pattern:
- The buyer is in a hurry and offers to arrange the courier.
- They send a fake courier link.
- The link asks for your personal and banking details and a four- or five-digit code.
- That’s enough to take money from your account.
Detective Inspector Stuart Mills said the scam is likely run by international organised crime, and targets people under financial pressure. His rule: "You should never give those authorisations or confirmation details to a third person at any time." Go to your bank’s site yourself, never through a link a buyer sends.
If you clicked
- Change your Trade Me and email passwords.
- If you entered card or bank details, call your bank now.
- Report scam listings through Community Watch, and report the scam to Netsafe.
Note: the bank reimbursement rules don’t cover marketplace purchase scams, which makes prevention even more important. A free exposure check shows if your email is in breach data.
Frequently Asked Questions
Is it safe to let a Trade Me buyer arrange the courier?
Be careful. Police warned of fake buyers who send a courier link that asks for bank details and a code. Never enter banking details or codes through a buyer’s link.
Does Trade Me email you to finalise a sale?
Trade Me emails you the buyer’s details after a sale. It never asks for your Trade Me login, card details or banking password.
How do I report a Trade Me scam?
Report suspicious listings through Community Watch and scams to Netsafe.
How can sellers avoid Trade Me scams?
Turn on MFA, allow bids only from authenticated members, and don’t click links in sale emails.
Sources
- RNZ: Police warn of scammers posing as buyers on online sales platforms (Dec 2024)
- Trade Me: Phishing emails after a sale