ETSY-zendesk send me a verification link looking like "https://etsy.verlfy.com [etcetc]Is it legit?

[ShrineOfAnOni]

Hey, 

I just got this message and I am so confused. Can anyone help me on what this is or if it is legit? The verify is written with an l (L) instead if an i (I) too???

"Thanks for contacting Etsy! Our support staff received your request "Important: Please verify your account immediately using the following secure link: [This content has been removed by Moderation. Please do not share unsafe links in the Forums.] " and will be in touch as soon as possible.

To add a comment, reply directly to this email or go to https://help.etsy.com/hc/requests/20258752.

To see the statuses of all your help tickets, go to [My Support Requests](https://help.etsy.com/hc/requests).

Thanks,
Etsy Support

--

This message is a private conversation between you and Etsy. Please respect this confidentiality and refrain from distributing this communication without permission from Etsy. If you feel this message was sent to you in error, please delete it and let us know.

Please note that feedback or ideas you share with us are non-confidential and non-proprietary to you. You can read more in Etsy's Terms of Use (Section 6).

If you live in North America or South America, this email is sent by Etsy, Inc., 117 Adams Street, Brooklyn, NY 11201, USA; if you live elsewhere, this email is sent by Etsy Ireland UC, a subsidiary of Etsy, Inc., 66/67 Great Strand Street, Dublin 1, D01 RW84, Ireland having company registration number 495696 and VAT registration number IE9777587C. You are receiving this email because you registered on Etsy.com with this email address.

Copyright © 2025 Etsy, Inc, an affiliate of Etsy Ireland UC. All rights reserved."

------

The E-Mail comes as plain text, no images, no nothing.

When I go to the Etsy-help centre, there IS a request, but it only states a single one-line message, which I should have sent?:

"Help....I got this on my etsy, what do I do????" - posted 1 hour ago -> I have not posed anything of sorts! I was not even on my PC one hour ago. !!

I changed all my log-ins and stuff, but I am so confused.

There are no weird log-ins in the log-in history of my account and I cannot find anything else, that might help me understand why I got this E-Mail.

I hope someone has a hint for me! QwQ

~ KAI

[ModAngie · Accepted solution]

Hello,

Etsy is actively engaged in preventing scammers from targeting our community members. Please note that this fraudulent outreach has been reported to our team for investigation and resolution.

If you receive a suspicious message via Etsy Messages, please proceed with caution. Etsy Support will never ask you to provide personal information via Etsy Messages, such as your email address or password. Any legitimate message from us will show in your "From Etsy" folder.

If you receive a suspicious message, here’s how to report it:

1. Sign in to Etsy.com and go to Your Account.
2. Go to Messages. 
3. Select the suspicious message from your inbox. 
4. Choose Report.

You’ll find examples of common scammer techniques and phishing messages here in our Help Center. Read our Account Security Checklist in the Seller Handbook for more steps you can take to protect your account.

[ShrineOfAnOni]

Hey ModAngie, thank you for the super-fast reply!

The message did not arrive in my Etsy-Messages, it arrived at my E-Mail box.  

So there was no way to see, if it comes from the ETSY main account, yet it states it comes from ETSY-Zendesk:

"Etsy Support<support@etsy.zendesk.com>"

[BagmakerSupply]

@ShrineOfAnOni: "So there was no way to see ..." eMail address are very easy to spoof. You would need to look at the raw headers of the eMail and see if the IP address of the sending eMail server belongs to Etsy or ZenDesk.

[MaricreaSwiss]

I think there is a bug / issue in Zendesk on Etsy side, I've actually received the mail from Etsy with the same phishing URL as well - it appears that I've raised a request.
When I check the Etsy Support Request page (dont worry, I didnt click on the link, I went via the offical Etsy support help page) I found that there is an open Request under my name - but funny enough I DID NOT raise this request.

The Support Request is by someone whos asking what this phishing link is about, but its under my name, which again, I did not raise.

So check your support requests under help.etsy.com - I am sure you'll see the same as I did.
Either its a bug, or someone actually found a vulnerability on Zendesk and is misusing it.

[ShrineOfAnOni]

Omg, this is exactly what happened to me! Thank you for putting it into better words,  I am so nervous rn  I couldn't describe  it any better. 

There is an open request in my account  that I 100% did not open / write.

Thank you for sharing your experience as well!!

[MaricreaSwiss]

Glad I am not alone, was highly confused - Etsy you should check this.
I've replied in the support request stating that I didnt raise it.

[BrooklynStVintage]

Please let us know the outcome of this, very concerning

[CRSPrintsUK]

I also received the same phishing email, and I have the support request created too.

While you can spoof emails, without verification, they'll usually go to spam (depending on your email setup). This was sent by Zendesk and verified. As there are also support tickets, it is probably an Etsy vulnerability that uses the support ticket creation to get the email sent.

[MaricreaSwiss]

Yes its highly likely a Zendesk vulnerability.

I would bet that the support request message is the same for all of us.

Let me guess, the initial support request message just says this:
"Help....I got this on my etsy, what do I do????"

And the request title has the phishing URL in it (which in the official mail is clickable).

[ButterflyFeetDigital]

Especially considering the spelling error, I would be suspicious too ... 

[Crimadus3DDruck]

Got the Same. Who ever make this he did it big.
Had not Response yet to the support Mail. Hope Etsy Support dont let them Scam and give our Data.

[MaricreaSwiss]

The support request that I had just got closed by Etsy without a comment.
So I assume they are aware by now.