Safe Marketplace meetups and the payment scams aimed at sellers
Most Marketplace sales are uneventful: a message, a parking lot, cash, done. The losses come from a small set of rehearsed scripts that target sellers — and they work by rushing the one step that matters, payment verification. Canadian numbers underline why this deserves a procedure rather than a vibe: figures reported from the Canadian Anti-Fraud Centre's 2024 annual report put dollar losses tied to e-transfer payments up 26.1% year over year, at over $36 million, with phishing victimization up 6.8%. This guide lays out the scripts, then a single procedure — screen, meet, verify — to run on every sale, at every price point.
The three payment scripts aimed at sellers
The overpayment. The buyer sends more than the price — a cheque, a money order, a "mistaken" transfer — and asks you to return the difference. Bank security guidance is direct about this pattern: eagerness to overpay is a scam sign, a cheque or money order should never be accepted for more than the amount requested, and no money should ever be returned until your own bank has confirmed the original payment is valid. When the original turns out to be fake, the returned difference is the loss.
The fake e-transfer notification. A text or email that looks like an Interac notice invites you to click a link and choose your bank to "accept" the money. Fraud-prevention guidance for e-transfers is blunt: never click a link that is supposed to initiate a transfer, because the lookalike pages exist to harvest banking logins. The tell is structural, and it is covered in the verification section below — with Autodeposit set up, a real notification never asks you to click anything.
The code and the courier. Variations on a theme: the buyer needs a verification code sent to your phone to "confirm you're real," wants to move the chat to WhatsApp, email, or text, sends a QR code to scan for payment, or offers to send a courier with an envelope. Each one moves you somewhere unprotected. Scam research consistently flags the push to leave the platform as a red flag — off-platform conversations cannot be investigated by Facebook — and a QR code, unlike a readable link, gives no visible clue where it leads. Passwords, one-time passwords, and PINs are never part of a sale; a request for one ends the conversation.
Screen the buyer before you agree to anything
Screening takes a minute and uses signals the platform itself provides. Seller ratings become public once a seller has five or more eligible ratings, and the same profile system works in reverse: check how long the buyer's account has been active, whether the profile is consistent, and whether the conversation matches a person who wants the actual item — questions about condition, a specific pickup time, a confirmation before the meeting. Pressure is the negative signal that matters most: a buyer who rushes, changes the story, or steers payment talk toward any of the three scripts above has answered the screening for you. Facebook's own advice on suspicious activity is to cancel the transaction, stop communicating, and report the person — and it applies at the chat stage, before any meetup is arranged, not just at the curb.
The safe meetup procedure
- Keep the whole negotiation in Messenger. The thread is your record, and it is where the safety tools live. A buyer who insists on moving off-platform before a time is even set does not get a meeting.
- Set the place on your terms. Facebook recommends a public, well-lit area for in-person meetings and gives a police station as an example. Busy retail parking lots in daylight follow the same logic: people, cameras, and an easy exit.
- Create a meetup plan and share it. From the Messenger thread, Marketplace's meetup plan lets you set the method, time, date, and location, add notes, and share the plan with a trusted friend or family member, who receives the location, time, and date. Plans exist for local pickup transactions — not for checkout-and-shipping orders — and are removed from the friend's thread after the scheduled time.
- Bring the item tested and ready. Let the buyer inspect in person — electronics powered on, accessories out. Inspection is not a concession; a buyer who has seen the item work has nothing left to dispute at the payment step.
- Take payment before the item leaves your hands, verified your way. Cash counted at the meetup, or an e-transfer confirmed inside your own banking app — never from a screenshot, a shown email, or a notification the buyer displays on their phone.
- Close the loop in the thread. A short "sold, thanks" message and marking the listing sold keeps the record straight and stops further inquiries.
What success looks like: the meeting happened where and when your shared plan said it would, the buyer inspected the item, the money is visible in your own account or counted in your hand, and only then did the item change hands. Any step that could not be completed is not a detail to smooth over — it is the procedure telling you to pause the sale.
Verify the payment in your own app, never in theirs
For Canadian sellers, one setting does most of the defensive work: Interac e-Transfer Autodeposit. Bank guidance describes enrolling in Autodeposit as the recipient-side protection — funds deposit automatically, with no security question to answer. That matters because interception fraud works the other way: a fraudster who gains access to the recipient's email account and guesses or obtains the security question's answer can divert a question-based transfer. Two habits follow. First, if you receive question-based transfers, the security answer never goes in the transfer message itself, and it is shared only over a secure channel such as a phone call. Second, learn what a real Autodeposit notification looks like: it simply states the money was deposited. An "e-transfer" email that requires clicking a link to accept is, for an Autodeposit user, a scam by construction — no bank visit via that link, ever. An even stronger pattern, recommended by fraud-prevention experts, is to be the initiator: request the money through your own banking instead of receiving a stranger's notification at all. And treat any request to hold an item in exchange for a deposit sent sight-unseen with the same suspicion — on buy-and-sell items, that ask is usually the opening line of a scam, which is also why hold and deposit terms should only ever be agreed in the chat, in writing, with an expiry.
Payment methods compared, from a seller's chair
| Method | How verification works | Standing rule |
|---|---|---|
| Cash at the meetup | Counted in your hand before the item moves | Default for local sales; no record, so confirm the amount before parting |
| Interac e-Transfer with Autodeposit | Balance visible in your own banking app; no link, no security question | Preferred digital option; a click-to-accept email means it is not real |
| Interac e-Transfer with a security question | Deposit depends on the answer staying secret; interception targets the recipient's email | Acceptable with discipline: answer never in the message, shared by phone only |
| Cheque or money order | Validity is only real once your bank confirms it — which can be well after deposit | Never for more than the price, and never refund a "difference" before the bank confirms |
If you already clicked or already paid
Speed matters more than embarrassment. If banking details went into a fake page, contact your bank through the number on your card or its official app — not any number in the suspicious message — and follow its fraud process. Report the account and listing in Marketplace; Facebook's guidance is cancel, stop communicating, and report, and local authorities are the next call if anything about the exchange feels threatening. In Canada, marketplace and rental scams can also be reported to the Canadian Anti-Fraud Centre at 1-888-495-8501. Reporting is not just self-protection: the rating and report trail is the screening material the next seller relies on.
FAQ
Is it safe to give a buyer my email for an e-transfer? An email address is how e-transfers are addressed, and with Autodeposit it is also the safer configuration — the money lands without a security question. What is never safe is acting on a notification link sent to that email; verify in your banking app instead.
A buyer sent too much and asked for the difference back. The money shows in my account — is it real? Not necessarily, and the bank guidance on exactly this pattern is to return nothing until your bank confirms the payment itself is valid. A balance display is not that confirmation.
Where should a high-value meetup happen? The platform's own example is a police station; the general rule from the same guidance is public and well-lit, with your plan shared with a trusted contact through Messenger before you go.
General information only, not legal or financial advice. If you feel unsafe during any transaction, leave and contact local authorities. Guidance and figures cited were checked on 2026-10-16.