New Etsy Phishing Scam That Looks VERY Real!

[LittleSales369]

Fellow Etsy sellers – there’s a dangerous new scam going around and I just got hit by it.

Here’s what happened:

1. I received a real-looking email from Etsy saying I had a new message.

2. When I clicked the link in the email, it opened Etsy Messages and showed a thread about account suspension or payment issues regular scam

3. But when I go directly to etsy.com or the Etsy app, that message does NOT appear. It’s hidden or already removed.

4. The message contained a “Verify Your Account” link that looks very convincing — something like this:

[This content has been removed by Moderation. Please do not share unsafe links in the Forums.]

This is NOT Etsy – it starts with “etsy.com” but the real domain is surl.lt, a phishing link trick.

5. That link opened a very convincing fake Etsy Help Center page.

6. The page asked for:

Full name

Phone number

Bank account info 

Address

And even a passport upload

This is 100% a phishing attack trying to steal your identity and banking info.

[LittleSales369]

To make its clear email notification is from : no-reply@account.etsy.com

But because etsy bots delete from app and Web versions of etsy you don't see message , but email notifications is send anyways and it's triggers you in reading message with all this scam

[LittleSales369]

Here is edited full message if interested: 

We’ve detected a problem with your Etsy account that needs your immediate attention. A recent transaction attempt failed due to unverified banking information. Additionally, we require confirmation of your account ownership.

Until these issues are resolved:

• Your store will be temporarily suspended.

• All sales and payouts will be on hold.

Please take the following steps:

1. Update and verify your banking details to ensure secure transactions.

2. Complete a quick identity verification process to confirm you’re the account owner.

Click the link to issues these issues promptly:

Fakelink

Thank you for your quick response.

Best regards,

The Etsy Support Team 

[TrinketDrawersUK]

Never click on links in emails. 

[swatchoclock]

Exactly, always trust your gut and go to the website and see there. If there really is or would be an issue with your banking details, it would pop up on the website...

[LittleSales369]

Link is in etsy messages and not in emails

[Amaradorn]

@LittleSales369 

Never click on links in Etsy messages.

[HazelsOldiesNGoodies]

Never click on links in "Etsy Messages" because they are not from Etsy.

[SurnamePro]

.it domains are in Italy .it domain names can only be registered by people or companies in the European Economic Area (EEA), the Vatican State, the Republic of San Marino, and the Swiss Confederation. 

Sure looks like spam to me. 

[LittleSales369]

It's .LT domains and this page is just url shorter used by scammers 

[SurnamePro]

I thought it was .it but the .lt domain is: "lt is the Internet country code top-level domain (ccTLD) for Lithuania"

[BeaconwoodDettman]

Thank you for sharing this

[PrimFun]

Etsy messages have to come via the folder.  IF the message is not in the Etsy folder when you click on the folder, it is a scam attempt.

And yes hackers are getting very slick. 

[AnimalPaperPrints]

Thank you so much for the info!!! I wonder, if they keep perfecting their scams like this, where will it all end...

One thing’s for sure: I won’t be clicking on anything unless I’m really sure!

[HazelsOldiesNGoodies]

I'm with @LoonMtEmbroidnCrafts -  that link looks as phony as a $13 bill.

I'm never going to click on anything that tells me I have to tell them how much money I have before they can send me money.

[LoonMtEmbroidnCrafts]

I would never click or go to a link that looked like the one the OP showed. Certainly doesn't look legit to me.

[vintageNCtreasures]

On your message page it clearly states right under any message you get from scammers, shoppers, buyers this info:

"To stay protected, stay on Etsy. Never follow links to other sites, and don’t share contact, account, or financial info with anyone in Messages. Learn how to spot spam."

[LittleSales369]

I can bet you its don't say this  

[ChillwolfArt]

@LittleSales369  Thank You, I appreciate you sharing this; too many new Sellers are falling for junk like this. What pizzes me off frankly, I don't know how these idiots are skating by when impersonating Etsy Support, and coming through Etsy Messages. You would think these oh so very smart bots would pick up on key words (Etsy Support, Verification, and so forth), and blast these idiots' Messages from the system. They do catch some of them, but how obvious ones like this get through, blows my mind.

[LittleSales369]

Etsy bots find scam in this message but they still send email notification , this is new problem  

[LittleSales369 · Accepted solution]

NEVER click on links in emails unless you verify the sender and URL.

ALWAYS go directly to etsy.com or open the app.

If the message doesn't show up there, it's fake.

Enable 2FA on your Etsy account.

If you already entered info, change your passwords, contact your bank, and consider identity theft protection.

[MuggedCapped]

im a new seller on etsy just today, earlier i had 2 orders come through, and they also messaged me saying that they bought the item, but there was also a link, and i did click it unfortunately because I thought it was etsy wanting me to verify my account, but ive never been on etsy before so i had no idea, it did look quite convincing, they tried to scam me for £300, luckily they didnt get nothing. This really sucks for people whether they are buyers and sellers.

[ChillwolfArt]

@MuggedCapped  I'm glad you recognized it as a scam. They wanted you to input your banking info so they can steal from you (which has happened to many Seller).
When you have a TRUE Order, it will appear under "Orders" (Left Column in Shop Manager. It will also show in your Payment Account. If it isn't in those places, there is no Order. These scammers give me a pain.

[ModAngie · Accepted solution]

Hello,

Etsy is actively engaged in preventing scammers from targeting our community members. If you receive a suspicious message, please proceed with caution, and do not click on any suspicious email links. Etsy Support will never ask you to provide personal information via Etsy Messages, such as your email address or password. Any legitimate message from us will show in your "From Etsy" folder.

If you receive a suspicious message, here’s how to report it:

1. Sign in to Etsy.com and go to Your Account.
2. Go to Messages. 
3. Select the suspicious message from your inbox. 
4. Choose Report.

You’ll find examples of common scammer techniques and phishing messages here in our Help Center. Read our Account Security Checklist in the Seller Handbook for more steps you can take to protect your account.