How a Phishing Scam Tricks You: A Step-by-Step Example
See a step-by-step example of how phishing scams work. Learn how cybercriminals and phishers trick you into giving up your personal information.
Phishing scams are designed by cybercriminals to look convincing. These phishers often impersonate buyers to trick sellers into giving up their financial information.
Here’s how a typical scam unfolds:
|
Step 1: The Initial Contact A scammer, posing as an interested buyer, contacts you about your listing on Carousell. |
|
|
Step 2: Moving the Conversation Off-Platform The scammer will quickly ask for your email address or to move the chat to another app, like WhatsApp or Telegram to avoid our security monitoring systems. This is a major red flag. |
|
|
Step 3: The Fake Payment The "buyer" agrees to your price and claims they have made payment. They send you a link or a QR code and instruct you to click it to receive your money. A legit user will never ask you to do this. |
|
|
Step 4: The Phishing Website The link directs you to a fraudulent website that looks exactly like a legitimate Carousell or bank payment portal. The URL might be slightly misspelled or contain a combination of the brand name. |
|
|
Step 5: Stealing Your Information The fake site will ask you to enter sensitive information to "verify" the payment. This can include:
|
Once you enter this information, the scammer has everything they need to access your funds.
How to Protect Yourself:
- NEVER click on links or scan QR codes sent by other users to receive payment. A legit business transaction on Carousell will never require this.
- All legitimate payments and order details can be verified within the Carousell app on your Profile page under 'My Sales'.
- If a buyer insists you follow a link or share your email to get paid, stop and report them to us immediately.
Learn more tips on how to stay safe on Carousell here.
The examples provided herein are for illustrative purposes only. Any resemblance or reference to real persons, usernames, entities, or situations is purely coincidental, unintentional and are not intended to represent actual events.
This content is based on the Carousell 2024 Regional Scam Trends Report.
Related articles from the 2024 Regional Scam Trends Report:
Last updated: 30 July 2025