Facebook Marketplace & Gumtree Scams: 2026 Warning

The Evolving Landscape of Online Marketplace Scams in 2026

By mid-2026, scammers operating on platforms like Facebook Marketplace and Gumtree have refined their techniques significantly. They leverage social engineering alongside increasingly convincing fake profiles and sophisticated payment redirection schemes. The focus has shifted from simple 'no-show' scams to more intricate plots involving identity theft and banking fraud.

A common pattern we're seeing is the 'phantom product' scam, where non-existent high-demand items are advertised at enticing prices, or the 'overpayment refund' scam, where a buyer sends more money than requested and asks for the difference, often via a fraudulent payment link or fake banking app request. Scammers also frequently exploit urgency, pressuring victims to act quickly before they can properly verify the transaction or the seller's authenticity.

Common Scam Tactics to Watch Out For

Beyond the phantom products, 'phishing for details' is a prominent concern. Scammers may pretend to be interested buyers or sellers, then ask for personal information outside the platform – like bank details, driver's licence photos, or even 'verification' codes that bypass two-factor authentication on other accounts. They might insist on communicating via WhatsApp or email where platform protections don't apply.

Another widespread tactic involves fraudulent payment requests. This could be a fake 'PayID' prompt, a QR code that directs to a scam website, or a request to use an unfamiliar payment app. Scammers often use sophisticated images and branding to make these requests appear legitimate. Be especially wary of anyone asking you to send money to cover 'insurance' or 'delivery fees' upfront for an item you haven't seen.

Identifying Red Flags Before You're Scammed

Vigilance is your strongest defence when using online marketplaces. Always question anything that feels 'off.' Scammers often create new profiles with little activity, or profiles that appear to be genuine but have been hijacked. Check the seller's or buyer's history, reviews, and the age of their profile. A brand-new profile selling a high-value item at a deep discount is a major red flag.

Communication is key. Does the person avoid direct questions? Do they rush you? Do they refuse to meet in a public place or allow inspection of the item? Be suspicious of anyone who attempts to move the conversation off the platform immediately, as this is usually to avoid official scrutiny. Remember, if a deal seems too good to be true, it almost certainly is.

Immediate Steps After Losing Money or Suffering a Cyber Incident

If you suspect you've been scammed or have lost money, acting quickly is paramount. Your first call should be to your bank or financial institution to report the fraudulent transaction. They may be able to stop payments or reverse transactions, especially if you act quickly. The sooner you report it, the better your chances.

Next, report the scam to the platform where it occurred (Facebook Marketplace, Gumtree). This helps them take down scammer profiles and prevents others from falling victim. Also, report the incident to ReportCyber at cyber.gov.au. This national reporting mechanism helps Australian law enforcement combat cybercrime. If you're overwhelmed or unsure of what to do next, KNOMI is who you call; we can help you navigate these initial, critical steps and coordinate your response.

Consider other potential impacts. If you shared personal information, your identity might be at risk. Monitor your credit reports and consider placing a credit ban with credit reporting agencies like Equifax, Experian, and illion. IDCARE, Australia's national identity support service, is an excellent free resource for guidance on identity theft and compromise.

Essential Actions if You've Been Scammed:

• Contact your bank immediately to report the fraud.
• Report the scam to Facebook Marketplace or Gumtree.
• Submit a report to ReportCyber (cyber.gov.au).
• Change passwords for any accounts that might be compromised.
• Monitor your bank statements and credit reports for suspicious activity.
• Contact IDCARE if personal information was disclosed.

Preventing Future Incidents and Recovering Peace of Mind

Prevention is ongoing. Always use secure payment methods that offer buyer protection where possible. For local pickups, always meet in a public, well-lit place, and ideally bring someone with you. Never share your bank login details, PINs, or one-time verification codes with anyone.

Recovering from a scam can be emotionally taxing, not just financially. It's normal to feel angry, embarrassed, or frustrated. Remember, scammers are professional manipulators, and you're not alone. Reach out to support services like IDCARE for guidance. For a comprehensive review of your digital security posture after an incident, or to simply ensure you’re protected going forward, KNOMI can provide expert assistance and peace of mind.

Frequently asked questions