someone else used my account and entered listings

[lasfibers]

I received 2 email notices giving me a code to enter my account.  I was out of town and just thought they were spam.  When I got back home someone had gotten into my account and deactivated my listings and entered 25 listings of shoes?  Etsy said to just change my password and everything will be fine.  How did someone get the code and enter my shop?  No one else had access to my computer.  I am reading to do the two factor sign in but it says they send you a code.  So I'm still confused and unable to communicate with anyone at Etsy.  Whoever did this did not delete my listings or change any of my information.  Is there anyway they would have gotten my banking info?  How would I change my user name and would that help?

[Hertfordweaver]

I think you should check that they didn't change your bank info as well.

[ChristmasIsLove]

https://help.etsy.com/hc/en-us/articles/115015654008-What-to-Do-if-You-Suspect-Fraud-in-Your-Etsy-Ac...

[lasfibers]

How would two factor authentication help?

[ThePurplePuppy]

Check every aspect of your shop to see if it has changed. This includes your password, email, bank info, credit card info, etc.  If they have changed  these things the problem is your computer has been compromized--not just your Etsy account.

If you need to change any info in your shop use a different device until you can have yours checked out and it is clean of keystroke loggers, etc.

[AAANativeArts]

Don't just use a different browser on your computer, either. That is probably compromized, too. Someone has probably put a keylogger on your computer that sends them everything you type into your computer, either from a link you clicked in an email or an unsafe website. Some emails these days you don't even have to click or download anything. Just opening an email from a stranger can be enough to download something on your computer.

If you don't have anti-virus software activated on your computer, you should do so right away. There is one built into Windows, but you have to turn it on. There are also many paid anti-virus programs. Don't ever give control of your computer to any online tech support.

[lasfibers]

I have run virus scan on computer, etc. and it's fine.  I don't see any other changes but I have charges for all those listings plus some ad charges.

[lasfibers]

AAANativeArts  How would someone put a key logger on my computer?  No one has had access to it.  Could that be done remotely?

[vintageNCtreasures]

@lasfibers 
You can tell if someone has logged into your account.
Go to "My account" (click the down arrow on your avatar), then click the security tab.
Scroll down to "sign in history".

You can also access this from your shop manager page, scroll down on the bottom left, click the "up" arrow and click account information.

As for someone putting a keylogger on your computer, if you clicked on a link in a phishing email, went to a website that wasn't what it seemed and clicked links on that site, any of these could install malware, keystroke loggers.

ETA: make sure someone didn't change your bank account info or credit card info.
You probably need to contact Etsy using the link posted above (not that you'll get much help, just keep replying the email that you still need help).

[lasfibers]

Interestingly there was no evidence of anyone but me logging into my account.  I have contacted Etsy via email which is the only way I've found to contact them.  No message back from them yet.  I am not seeing that my bank account has been altered.  This is so weird!  Why would someone do this?  I mean what's the catch?  I've changed all my passwords.

[givemeacrown]

Have a look at the "About" section of your shop front - is that information from the hacker? Please don't click on the links in that section - you don't know where those links will lead. Perhaps take a screenshot then edit that section to remove their information.

They may have hacked your account to try and drive sales on another platform where they can receive payments.

[Amaradorn]

You already had 2-factor authentication turned on but it sounds like they also had access to your email account in order to get the codes to log in. Can you change it so it sends the codes to your phone via text message instead? Then change your password again.

Then check you bank account details have not been changed.

Take a screenshot of your 'About' section before you fix it and send this to Etsy as evidence of the hack. It might help them block whoever is doing it.

Have you recently received a message from a customer with a list of items they wanted to purchase? Did you click on any links and then log in to 'Etsy'? Or did they send you an image which required that you install an app on your pc in order to view it? These are some of the ways that hackers can gain access to your accounts.

If they have installed malware on your pc you will need to get it removed (I suggest by an IT professional)

[thatregina · Accepted solution]

Hi Lorri, I'm sorry to see this. In addition to the excellent advice received above, I wanted to let you know that I've alerted an account specialist on your behalf. They will respond to you directly with further guidance.

I'll close this up now, with my best wishes. Thanks!