someone else has used my account and added listings

[StrandsinDemand]

Hi there, 

Recently, I noticed that someone has logged into my account and has been using it. I first noticed that I had messages that I never sent. I use 3rd party login, so I changed my password, signed every account out and re-logged in. I also tried to remove the 2 factor authentication, because it’s not showing on my authenticator app, however I need a code to remove it. I’ve emailed about how to remove it so I can set it up again but I haven’t had a reply yet.

Then after doing all this, I got a notification about a sold listing someone has added and sold. I quickly cancelled the listing and I’m not sure what is going on or why this keeps happening even after making all these security changes.

[NanaLetha]

If you were able to refund and cancel the sale, they you had to be logged into your shop to do that.

[StrandsinDemand]

Yes but somehow someone else is logging in and listing items

[FallenAngelBrass]

• On Etsy.com, in your Account settings, go to Security.
• Scroll down and review your sign in history. 
• You'll at least be able to see some info about who has been logging into your shop and you can log them out. 

[StrandsinDemand]

I have seen it and logged them out. I also changed my email password, yet they are still able to log in as me. Also, Etsy isn't showing on my authenticator app and i can't reset it.

[ArtDollsbyJD]

The security changes are not enough.  You use a 3rd party app to log in?  Are you referring to a password keeper?  Those are secure but any other 3rd party app should be suspicious.  Someone has your password and maybe even your new password.  If you did not run anti-virus or malware do so.  You may have key logging installed that is giving this other party information. 2Fa is helpful but not perfect.  Even that can be hacked.

Make sure you are working from a clean device.

Finding out who is logging in may help but if you have an ISP that changes location that may not be much help.

I would contact your bank or CC to get a new one.  Check the last digits of the account.  If this has been changed, you may need to change that.  You may need to contact Etsy for help on this. 

[StrandsinDemand]

I meant 3rd party as in google sign in, and my 2fa isn't showing on my phone, I've emailed etsy about this and waiting to hear back. My macbook is also fairly new so i don't feel as though it is compromised and I have removed all my cards from my account.

[CryzalisMasksUK]

I would remove your listings and put your shop on vacation until this has been sorted. I assume they are not your listings as they have nothing to do with wigs.

The listing currently put in your shop by the hacker, could get you closed down, so best to delete them 

[swatchoclock]

If you changed your password and someone is still or again logging in, your device/pc/tables/phone/etc might be compromised. Do you have anything installed antivirus or antimalware wise?