Phishing Scam Awareness & Prevention Guide

 

Phishing scams are everywhere, and they’re becoming more advanced every day. But don't worry! Here’s everything you need to know to stay safe while buying and selling on Carousell.

 

What is a Phishing Scam?
A phishing scam occurs when someone pretends to be a trusted entity—like a platform or a person you know—to steal your personal or financial information. This can happen during any online transaction, but knowing how to spot it can save you from disaster.

Why Do Scammers Phish?
Phishing is all about one thing: stealing your money or your sensitive information. Here’s why they do it:

• Stealing Personal Details: They’ll try to access your login info or credit card numbers.
• Account Hijacking: They use your account for scams or identity theft.
• Extracting Payments: They want to get payments outside secure platforms, making it hard to recover lost funds.
• Spreading Malware: They may infect your device to steal more data or demand a ransom.
• Impersonation: They act like someone you trust to manipulate you into complying.

Who Are Scammers Targeting?
Phishers are experts at preying on people who might be less cautious online. You’re most at risk if:

• You’re New to Online Transactions: If you're still getting familiar with buying or selling online, you might be vulnerable.
• Tech isn’t Your Forte: Scammers often target people who aren't familiar with the latest tricks.
• You Have Weak Security Habits: Using simple passwords or sharing personal info freely makes you an easy target.
• You've Been Scammed Before: Once you’re targeted, phishers might come back for more.
• You're in a Rush: Scammers love to create urgency to make you act quickly without thinking.

Being aware of these risks can help you avoid becoming a target.

How Does Phishing Impact Your Transactions?
When it comes to online buying and selling, not all transactions are created equal. Here are two types of transactions to keep in mind:

• Buyer Protection Transactions: In these transactions, the platform securely holds your payment until the buyer confirms the item is as described. Personal and payment details stay safe within the system, reducing your risk.
• Non-Buyer Protection Transactions: These transactions are riskier. Payments are handled directly between the buyer and seller, often outside the platform. Sharing personal payment information in chats opens the door for scammers to strike.

Understanding the difference is key. Scammers take advantage of both, so stay alert!

How to Spot Phishing Scams:
Phishing can look like a lot of things, but it always has a few red flags in common. Here’s how to spot the tricks before it’s too late:

1. Casual Conversations—The Great Pretender
Some scammers engage you in casual chats to slowly gather personal info, like your email or phone number. Their goal? To redirect you to fake sites or keep the scam going elsewhere.

What to Watch For:

• Casual conversation that shifts to personal info requests.
• Hidden messages, creative tactics, or unusual methods.

Tip : Always verify the identity of the person you're talking to before sharing anything. Don’t fall for the charm—scammers can disguise themselves as friendly!

2. Requests for Personal Information for “Payment”, “Shipping”,  or “Confirmation” Scammers often ask for your personal information in the guise of “confirming” a shipment or “finalizing a payment.” But once they have it, they can use it for further scams.

What to Watch For:

• Requests for sensitive details like your address, phone number, or email.
• Scammers pushing for urgency.

Tip: Always enter payment and shipping details directly into the system if Buyer Protection is enabled. No one should ask for this info via chat.

3. Moving Conversations Off the Platform
Phishers often try to lure you off the secure platform to communicate via private messaging apps like WhatsApp or Telegram. Once you're off the platform, it's easier for them to trick you.

What to Watch For:

• Requests to move to "more personal" communication.
• Claims that it’s safer to chat outside the platform.
• Excuses that would justify their request to move outside the platform

Tip: Keep all communication within the platform where the transaction took place. If someone tries to move the conversation elsewhere, it’s a major red flag. Carousell will never ask you to communicate outside the platform.

4. Fake Websites and Redirects
Scammers create websites that look like the ones you trust, using nearly identical logos and layouts. They may ask for your credentials or personal info.

What to Watch For:

• Slightly off URLs—like “carosell.com” instead of “carousell.com.”
• The site looks suspicious but still asks for personal details like your password.

Tip: Whether the website looks the same or not, if a link was sent to you, redirected you outside the platform, and asks for your credentials or personal info, it’s a red flag. 

• For Sellers - Carousell will never direct you outside the platform—we keep all conversations and transactions within our system for your safety.
• For Buyers - To stay safe, always complete your transaction in-app to benefit from Buyer Protection. However, if you choose certain payment methods, you will be securely redirected to an external payment provider’s website to finalize your payment. This step is part of the trusted Buyer Protection process, ensuring your payment is secure.

5. QR Codes Leading to Fake Sites
QR codes are convenient—but scammers love using them to send you to fraudulent websites. These sites look like the real deal but are designed to steal your info.

What to Watch For:

• Unexpected QR codes, especially from unknown sources.
• Scammers trying to get you to scan codes to "complete payment."

Tip: Payments should always be completed in-app for Buyer Protection. If not, be cautious—QR codes can be used to send you to fake sites.

6. Fake Payment Confirmation Messages
Scammers might send fake messages pretending your payment has been processed, asking you to "confirm" your payment info.

What to Watch For:

• Payment confirmation emails or messages you don't recognize.
• Links in the message that lead to fake payment sites.

Tip: If you're unsure, avoid clicking links and log into your account to verify the payment status. Carousell will never send payment confirmation messages with URLs.

7. Smishing (Phishing via Text Messages)
Smishing uses text messages (SMS) to trick you into revealing personal information. The scammer might pretend to be a bank, store, or even a government agency.

What to Watch For:

• Links in SMS with urgent requests like “Verify your account” or “Confirm payment details.”
• Unfamiliar numbers sending the message.
• SMS spoofing where messages appear to be from "Carousell".

Tip: Legitimate companies won’t ask for personal details via SMS. If in doubt, contact the organization directly. Carousell will never send SMS with URLs or request for personal information.

8. Fake Customer Service Requests
Scammers love to impersonate customer support reps. They may claim there's an urgent issue with your account or payment, asking you to act immediately or share sensitive info to "fix" it.

What to Watch For:

• Phrases like “Immediate action required!” or “Urgent!”
• A sense of panic or fear, like warnings about account suspensions or fraud.
• Links in the message—don’t click them! Always check the official site or app.

Tip 1: Carousell will never ask you for sensitive information via chat or unverified links.

Tip 2: Beware of users pretending to be from Carousell. Watch out for usernames that mimic Carousell staff—whether through misspellings, catchy names, or variations that sound official.

Stay Vigilant—Your Best Defense Against Phishing

Phishing scams thrive on deception, urgency, and manipulation. But by staying informed and cautious, you can protect yourself every step of the way.

Final Tip:
Phishing scams are designed to pressure you into acting quickly. If you ever feel easily persuaded, rushed or uneasy, trust your gut. Take a moment to verify everything before sharing personal details.

Remember:
Carousell prohibits the sharing of personal information and URLs/Links. Carousell prioritizes your safety by keeping all transactions within the platform. Always use Buyer Protection, where your personal and payment information is securely handled. Stay safe, stay informed, and don’t let scammers catch you off guard!