Why this Depop scam doesn't look like a scam

Bank Australia's customer support team says they've seen a rise in members under 34 falling victim to scams linked to Depop, the popular online marketplace for buying and selling second-hand fashion.  

Is second hand becoming the first choice?

Australian shoppers have a well-known love of fashion. In 2024, research found we buy an average of 56 new clothing items each year, more than consumers in the US, UK and China.  

At the same time, second-hand fashion is becoming increasingly mainstream. Australia's second-hand apparel market is projected to grow from $578 million in 2024 to more than $1 billion by 2032, driven by rising cost-of-living pressures, growing interest in sustainable fashion and more people using apps and websites to buy and sell second-hand clothes.  

For many Australians, apps like Depop offer a way to save money, discover unique pieces and keep clothing in circulation for longer rather than buying new.

As more Australians buy and sell second-hand clothing online, scammers are finding new ways to take advantage of the trust people place in these sites.

Bank Australia security expert Alex explains:

"What's particularly interesting about these scams is that they're not the typical buying-and-selling scams many people associate with online marketplaces.  

"Instead, they exploit Depop's built-in payment system."

How the Depop phishing scam works

Phishing is a type of scam where criminals create fake emails, messages or websites designed to trick people into sharing sensitive information such as passwords, card details or security codes.

The Depop phishing scam takes advantage of the platform's built-in payment system.

Unlike sites where buyers and sellers arrange payments themselves, Depop has a built-in payment system.

While it creates a seamless experience for users, it also gives scammers an opportunity to mimic a process people expect to encounter when selling on Depop.

A typical Depop scam experience might look like this:  

1. You list a jacket for sale.

2. Minutes later, a payment verification email arrives.

3. It looks genuine and asks you to update your details before funds can be released.

• This is the moment many victims are losing money to scammers.

Alex explains that they've seen cases where someone lists an item for sale and then receives an email claiming they need to update or verify their payment details before funds can be released.

The email appears genuine and uses branding that looks like Depop. The links lead to webpages that closely resemble a real website.

Victims may then be prompted to enter online banking login details, card details, one-time verification codes or other personal information.

According to reports covered by ABC News, scammers have also impersonated payment or delivery processes, directing sellers to fake websites that appear to be part of the payment process.

In some cases, victims reported losing significant amounts of money after providing card details through these fraudulent pages.

Fake Depop payment emails

These scams can be harder to identify because there may be little or no direct contact with a scammer.

Instead, scammers are copying the digital experiences people trust every day:

• Automated emails

• Customer support forms

• Chatbots

• Help desk systems

• Payment verification requests

Alex explains:

"For many years scam prevention focused on recognising suspicious people.  

"Increasingly, people need to recognise suspicious systems and processes as well."

In other words, the scammer isn't always pretending to be a buyer. They're pretending to be the website itself.

Why younger Australians could be particularly vulnerable

The rise of Depop scams challenges a common assumption that younger people are naturally protected by their digital skills.

Research from the Australian Youth Digital Index found 95% of Australians under 25 feel confident about online safety, while 91% said they were aware they should be working securely online to reduce exposure to online risks and threats.

But confidence doesn't always protect against scams.

According to cyber support service IDCARE, more than half of people reporting this particular Depop scam were under 25 years old.

IDCARE notes that victims weren't necessarily lacking digital skills. They simply didn't expect to encounter a scam in that context.

Alex says many of today's scams are designed to feel like legitimate online processes rather than traditional scams.

"The next generation of scams may not feel like you're talking to a criminal. They may feel like you're interacting with customer support."

"Instead of relying on suspicious messages or pressure from a stranger, scammers are increasingly building trust through convincing websites and support tools, automated communications and realistic digital experiences."

So, what should sellers watch out for on Depop?

According to Alex, while scammers continue to evolve their tactics, there are some common warning signs:

1. Be cautious of emails requesting payment updates  

If you're asked to update banking information through a link, access Depop directly through its app or website rather than clicking the email.

2. Never share one-time verification codes

Banks and legitimate businesses won't ask you to provide security codes through forms, emails or chat functions.

3. Check before entering personal information

If you receive an unexpected request for banking details, take a moment to verify it's genuine.

4. Be wary of urgency

Scammers often create pressure to make people act quickly and bypass normal checks.

5. Trust your instincts

If something doesn't feel right, stop and investigate before proceeding. Go directly to the official website or app before entering any information.

Remember, scams can happen to anyone

Technology may be changing, but the lesson remains the same. Being young, experienced online or digitally confident doesn't make anyone immune.  

The next scam you encounter might not arrive as a suspicious phone call or message.

It might look exactly like a payment update, support form or customer service interaction from a trusted website.

The best defence is understanding that modern scams don't always look suspicious, explains Alex.

"Sometimes they look exactly like the sites we use every day."

That's why sharing scam experiences matters. Every story helps others recognise warning signs, understand how scammers operate and feel less alone if they've been targeted themselves.  

Scams Awareness Week 2026 is about empowering people through shared experiences and practical knowledge.  

For more insights on emerging scam trends, practical ways to protect yourself and real stories from people who've experienced scams firsthand, explore our other scam prevention articles.

‍