How to Share Information Safely When Selling Something Online
What information is safe to give a buyer, what should stay private, and how to protect yourself from verification-code theft, fake-payment confirmations, and overpayment scams.
Selling items through online marketplaces, classified boards, and local community groups is one of the most common ways consumers exchange goods. Whether you are clearing out unused electronics, selling furniture before a move, or parting with a vehicle, every transaction requires some degree of communication with strangers.
However, online marketplaces are also targeted heavily by scammers who exploit the natural trust between buyers and sellers. The fundamental challenge for any seller is balancing practical communication with personal privacy: you need to provide enough detail to complete a legitimate sale without exposing credentials, identifiers, or location data that put your security, finances, or physical safety at risk.
The guiding principle is straightforward: share only what the transaction actually requires. Every additional detail—your personal phone number, direct email address, home address, or banking information—should be evaluated against legitimate transaction necessity rather than a buyer's unprompted demand.
The Information Hierarchy: What Is Safe vs. What to Keep Private
Not all information carries the same risk profile. When evaluating buyer inquiries, group requested information into three operational categories:
Standard information necessary for prospective buyers to evaluate the item:
- Item specifications, condition, and clear photos
- Marketplace display name or profile handle
- General neighborhood or cross streets for local pickup
- Package weight and dimensions for shipping calculation
- Public payment handle (only when direct payment is required)
Sensitive details shared only after terms, price, and precise logistics are agreed upon:
- Exact home address (only for bulky goods requiring home pickup, after price and time are finalized)
- Personal phone number (only when direct arrival coordination or pickup directions require voice/text)
- Vehicle VIN (commonly shared for history/title checks via recognized services, with precautions against fake report links)
- Personal email (only when external payment invoicing is strictly required)
Authentication secrets, credentials, and government identifiers that buyers never need:
- Authentication codes, MFA/OTP codes, Google Voice verification, or password-reset links sent to your device
- Account passwords, PINs, or security questions for any service
- Photos or scans of your driver's license or passport sent directly to a buyer
- Social Security number (SSN) or tax ID
- Full bank account and routing credentials
- Credit or debit card numbers, CVVs, or expiration dates
Keep Marketplace Communication On-Platform When Practical
One of the most persistent patterns across online classifieds and marketplaces (such as Facebook Marketplace, OfferUp, Craigslist, and eBay) is a prospective buyer immediately requesting to switch communication to standard SMS, WhatsApp, or personal email:
“I don't check this app often. Please text my phone directly at (555) 019-2831 so we can arrange pickup.”
An immediate, unprompted request to move off-platform can be a warning sign, especially when paired with payment, verification-code, or link requests. While legitimate buyers may also suggest phone calls or text messages for practical reasons—such as coordinating day-of arrival, large-item pickup directions, or scheduling—leaving the marketplace interface presents specific risks:
- Preserving transaction records: Keeping initial communication on-platform preserves an objective message history and may allow the marketplace to review the full exchange if a dispute or non-delivery claim arises.
- Platform safety and moderation tools: Many platforms apply automated warnings, suspicious-link filters, or user-reputation signals within their apps. Moving off-platform deprives you of whatever in-app warning systems or filtering mechanisms that specific service offers.
- Preventing social engineering lures: Scammers prefer private channels where they can send spoofed payment confirmations, phishing links, or unsolicited verification code prompts without platform oversight.
Best Practice: Keep conversations within the marketplace app whenever practical. If a buyer insists on communicating exclusively through external channels before basic terms and logistics are agreed upon, treat it as a warning sign. While staying on-platform significantly mitigates risk, it does not provide an absolute guarantee against scams; careful verification is always required.
Should You Give a Buyer Your Phone Number?
A common question among sellers is whether sharing a phone number is dangerous. It is important to understand the exact risk profile: your phone number is not a secret authentication token. Possessing your phone number does not allow an attacker to instantly compromise your phone or drain your accounts.
However, sharing your personal mobile number with an unknown buyer creates tangible secondary risks:
Target for Account Takeover
Your mobile number is frequently used as the primary identifier or recovery mechanism for email accounts, banks, and social media. Scammers use your number to trigger password-reset flows or Google Voice verification schemes.
Smishing and Spam Harvesting
Once scammers associate your phone number with your active online selling profile, they can flood your device with SMS phishing links (smishing) disguised as payment receipts, courier alerts, or platform security warnings.
When phone contact is legitimate: If you are selling a large, bulky item (like a sofa or kitchen appliance) and need voice coordination when the buyer is actively en route, sharing a phone number may be sensible. Even then, you can protect your primary mobile number by using a secondary virtual phone number (such as a VoIP number from a privacy-focused service) or the marketplace's built-in voice calling feature.
Never Share Verification Codes: The Account Takeover Trap
NEVER give a buyer an authentication, account-verification, password-reset, MFA, OTP, Google Voice, or account-recovery code sent to your phone, email, or personal account under any circumstances.
The most prevalent scam targeting online sellers is the verification code scam(frequently highlighted in Federal Trade Commission consumer alerts, including the Google Voice verification scam). While some marketplace platforms provide legitimate buyer-side pickup PINs to confirm delivery at handoff, a buyer should never ask a seller to read back or forward a security code that arrived on the seller's own device. Here is how the account takeover trap operates:
- The initial contact: The scammer contacts you expressing strong interest in your listing and claims they want to purchase it immediately.
- The false pretext: The scammer claims they have been burned by fake sellers or automated bots in the past: “To make sure you are a real person and not a scammer, I am going to send a verification code to your phone. Read it back to me so I know you are legitimate.”
- The hidden action: Behind the scenes, the scammer enters your phone number into an external service—such as Google Voice, your wireless carrier's account portal, or an online banking platform—and initiates an account registration, device pairing, or password reset.
- The delivery: You receive an authentic SMS or automated prompt containing a six-digit code.
- The exploit: If you read the code to the buyer, the scammer uses it to complete the setup of a forwarding number in your name, gain access to your mobile carrier account, or hijack an existing service.
What to Remember
Legitimate buyers never need a verification code from your personal device to verify your listing. Verification codes are designed exclusively to authenticate youto your own accounts. If any buyer asks for a code, cease communication immediately, report the profile to the platform, and block the user.
Verify Payment Yourself: Spotting Fake Confirmations & “Pending” Claims
Another common scam involves convincing the seller that payment has already been transferred when no money has changed hands. Scammers use several tactics to manufacture false confidence:
1. Altered Screenshots & Receipts
The buyer sends an image of a payment app screen displaying “Payment Sent to [Your Name]” or a PDF receipt. These graphics are easily generated using basic photo-editing software or online mockup generators. Never accept a buyer's screenshot as proof of payment.
2. Spoofed Payment Notification Emails
If the buyer obtained your email address, you receive an email designed to look like an official notification from Zelle, Venmo, PayPal, or Cash App. The email typically states that funds have been received but are “held in escrow” or “pending” until you provide a tracking number or ship the item. Legitimate peer-to-peer payment apps do not hold funds pending shipment verification.
3. The Bogus “Business Account Upgrade” Fee
In this scheme, the fake confirmation email claims the buyer attempted to transfer money, but because you have a personal account, an additional $300 to $500 must be transferred to upgrade to a “merchant” or “business” tier. The buyer claims they paid the extra fee and demands that you immediately refund the difference before funds can be released. Legitimate payment services never require sellers to pay a fee or refund a third party to receive standard payments.
The Independent Verification Rule
Verify the transaction directly through the official marketplace, bank, or payment service using its official app or website rather than relying on a screenshot, email, text message, or buyer-provided link. Distinguish between a completed payment and a transaction marked “pending” or “on hold.” Even when a transaction appears in your official account, be aware that certain payment methods carry risks of future disputes or reversals; avoid treating any display as absolute proof against later chargebacks unless using final, non-reversible settlement channels.
Fake Checks and Overpayment Scams
Despite being one of the oldest consumer frauds, the fake check and overpayment scam remains widespread on classified boards and marketplaces. As documented by the Federal Trade Commission (FTC) and the United States Postal Inspection Service (USPIS), this scam relies on consumer misunderstanding of banking check-clearing timelines:
How the Overpayment Pattern Operates:
A common fake-check scam involves sending more than the agreed price and asking the seller to return the difference or send money to a third party:
- A buyer agrees to purchase your item (often priced at several hundred or thousands of dollars) without negotiating.
- They send a cashier's check, business check, or money order made out for substantially more than the agreed-upon price (for example, sending $2,500 for an $800 item).
- The buyer offers a plausible excuse: their accountant made a mistake, or the extra funds are intended to cover third-party “movers” or “shipping agents” who will pick up the item.
- They instruct you to deposit the check and wire or transfer the difference back to them or their delivery courier via non-reversible methods (such as Zelle, wire transfer, or gift cards).
Under consumer banking regulations, financial institutions generally make funds from deposited checks available to account holders within one or two business days. However, discovering that a check is fraudulent, counterfeit, or drawn on a compromised account can take days or weeks.
Crucially: FUNDS AVAILABLE DOES NOT MEAN THE CHECK HAS CLEARED OR IS PROVEN LEGITIMATE.
When a fake check inevitably bounces, your bank will reverse the entire deposit from your account. If you have already transferred the “difference” to the scammer or third party, you are legally responsible for those lost funds, and your account may be assessed overdraft and return fees.
Rule of thumb: Avoid accepting checks from online buyers, and never agree to deposit an overpayment or wire money back to a stranger.
Sharing Your Address for Local Pickup: Portable vs. Bulky Goods
One of the biggest concerns for local sellers is personal safety when arranging item handoffs. The appropriate protocol depends on whether the item can reasonably be transported:
Portable Items: Public Meeting Locations
For portable items—such as electronics, mobile phones, clothing, power tools, musical instruments, or jewelry—meeting the buyer at a public location is strongly recommended over sharing your home address:
- Community Safe Exchange Zones: Where available, consider a designated parking area or public safe-exchange zone (such as participating police station lots; note that availability, signage, and monitoring vary by locality).
- Busy Commercial Locations: Coffee shops, grocery store entrances, or well-lit shopping center parking lots during daytime hours.
- Inside a Bank: For high-value transactions involving cash, some sellers choose to meet in the lobby of their bank during business hours to verify and deposit currency immediately.
Bulky Items: Staged Home Handoffs
For large furniture, appliances, or gym equipment that cannot easily be transported, a home pickup may be legitimate and unavoidable. Manage privacy and safety deliberately:
- Share General Neighborhood First: Provide the general area or nearest major cross-streets during initial price and availability discussions.
- Disclose Exact Address Only When Confirmed: Provide the street address and unit number only after price, date, and a specific arrival window are firmly agreed upon.
- Stage Near the Exterior: Where practical, move the item to the garage, porch, or driveway so strangers do not need to walk through your private living quarters.
- Have Another Adult Present: Consider arranging for a friend, family member, or neighbor to be present during the pickup whenever feasible.
- Secure Personal Items: Keep interior doors closed and store visible mail, bills, keys, and personal devices out of view.
Shipping Without Exposing More Information Than Necessary
If you are shipping goods rather than meeting locally, scammers utilize specific delivery-related tactics to obtain items without paying:
- Buyer-Provided Prepaid Shipping Labels: A buyer insists on emailing you a prepaid shipping label, claiming their business account receives discounted commercial rates. Accepting a buyer-supplied label allows the buyer to intercept, redirect, or file claims on the package without your knowledge, leaving you with zero proof of delivery recognized by the platform.
- Address Changes After Payment: The buyer pays via the marketplace and then sends a message asking you to ship to a different address (e.g., “a gift for my cousin”). Shipping to any address other than the verified address attached to the order forfeits your seller protection on nearly all major platforms.
- Courier Collection Schemes: The buyer claims they will arrange for a private courier or moving company to pick up the item and asks you to pay the courier in advance using funds they ostensibly sent via a fake payment confirmation.
Best Practice: Always use the marketplace's integrated shipping label program or purchase your own tracked, insured shipping label directly from reputable carriers (such as USPS, UPS, or FedEx). Always ship exclusively to the verified address attached to the transaction.
Personal Email Addresses: Why Sellers Rarely Need to Disclose Them
Buyers on platforms like Facebook Marketplace, OfferUp, or Craigslist frequently ask sellers:“What is your email address so I can send the payment?”
In almost all standard marketplace transactions, buyers do not need your email address. Most platforms process transactions internally. Even when using peer-to-peer payment apps, giving out a public cashtag, username, or phone number is standard—disclosing your personal email address is primarily what enables scammers to transmit convincing fake payment receipts and phishing emails.
If a buyer asks for your email address, politely decline and inform them that all communication and payment coordination must occur within the marketplace or using your public payment username.
Payment Handles, Bank Details, and Account Credentials
Understanding the boundary between public payment handles and private financial credentials is essential for safe selling:
Public Payment Handle
Your public username or handle on services like Venmo, Cash App, or PayPal. It is designed to receive transfers and does not grant account access. Sharing it when a buyer is ready to pay is standard practice.
Bank Routing & Account Number
Routing and checking account numbers should generally not be distributed to casual marketplace buyers. While bank wire instructions are legitimate for high-value sales (such as automobiles), they require deliberate security protocols.
Account Credentials & PINs
Your banking login passwords, app PINs, security question answers, and multi-factor codes.Never share these under any circumstances. No buyer, marketplace, or payment platform ever requires them.
Be Careful What Your Listing Photos Reveal
High-quality photos help items sell quickly, but casual household photography frequently captures private information in the background that sellers overlook:
- Mail and documents: Envelopes, magazine address labels, bank notices, or tax forms resting on tables or desks in the background can reveal your full legal name and address.
- Prescription bottles and medical items: Reveals health details and family names.
- Family photos and work IDs: Corporate access badges, children's school uniforms, or recognizable diplomas.
- Electronic screens: Monitors, tablets, or laptops displaying sensitive browser tabs, emails, or chat windows.
- License plates and house numbers: Vehicle plates or street numbers visible through windows or parked nearby.
- Keys and security systems: Clear photos of house keys can theoretically allow key duplication, while wall-mounted alarm keypads reveal security vendor configurations.
A Note on Photo Metadata (EXIF Data)
While some online marketplaces strip EXIF metadata (such as GPS coordinates) when re-encoding uploaded images, platform handling varies, and metadata may remain fully intact if images are sent directly via email, full-resolution messaging, or external cloud links. More importantly, visible background details in the photo itself—such as house numbers, street signs, family documents, or work credentials—pose the most immediate privacy risks. Take listing photos against a neutral, uncluttered wall and inspect the entire frame before publishing.
Identity Documents and Verification Requests
Occasionally, a buyer will demand proof of your identity before making a purchase:“Can you text me a photo of your driver's license or passport so I know you are trustworthy?”
Sellers should generally not send identity-document photos or scans directly to an ordinary buyer. Strangers on classifieds and marketplaces have no legitimate operational need or legal authority to inspect your driver's license. In reality, scammers request ID photos so they can use your face and credentials to impersonate a legitimate seller in future fraudulent transactions.
Distinguishing Platform Compliance from Buyer Demands
Regulated marketplace platforms (such as eBay, Etsy, or payment processors) and state DMVs may be required under federal regulations (such as Form 1099-K reporting rules and Anti-Money Laundering requirements) or state law to verify seller identities. When legitimate verification is needed, submit documents exclusively through that provider's official, encrypted account settings page or official DMV portal—never via direct chat messages, SMS, or unprompted buyer requests.
Vehicle Sales: What Is Legitimate vs. Dangerous
Selling a car, motorcycle, or boat involves higher values and distinct documentation requirements. Sellers must know what is standard practice versus what poses a security risk:
Legitimate to Share
- Vehicle Identification Number (VIN): A VIN is commonly shared with prospective vehicle buyers so they can review vehicle-history or title records through established reporting services (such as Carfax, AutoCheck, or the NMVTIS database).
- Odometer reading and title status: Disclosing whether the title is clean, salvage, rebuilt, or has an active lien is standard and legally customary.
- Maintenance records: Redact personal addresses, phone numbers, and financial details from service invoices before providing copies to buyers.
Dangerous to Share / Avoid
- Driver's license scans sent electronically: A prospective buyer does not need a digital copy of your license. You only need to verify each other's physical IDs in person when signing title transfer paperwork.
- Unfamiliar third-party vehicle report links: If a buyer refuses established history services and insists you purchase a vehicle report from an unfamiliar website link, treat it as a credit card skimming or phishing scheme.
- Unverified cashier's checks without in-bank validation: Always conduct the final title signing and check deposit directly inside the issuing bank during business hours.
Where Ephemeral Sharing Fits (And Where It Does Not)
It is essential to be realistic about security tools: The vast majority of marketplace transactions do not require transmitting any secrets at all. Paste & Purge does not verify buyers, prevent fraudulent payments, or make an unsafe transaction legitimate.
In virtually all online sales, the safest action is simply refusing to share unnecessary information. You should never use Paste & Purge—or any secret-sharing service—to transmit passwords, banking logins, MFA verification codes, or government IDs to an online buyer.
Where an Ephemeral Link Can Be Appropriate:
Temporary Access Codes: If you have already independently finalized logistics with a vetted buyer arriving to collect bulky goods, and you need to provide a temporary, limited-purpose gated-community visitor PIN or a one-time lockbox code, transmitting it through a self-destructing encrypted link ensures the credential does not linger permanently in marketplace message threads. You should still expire or rotate the temporary access code once the pickup is completed.
Remember: ephemeral links only protect the confidentiality of text in transit and limit long-term message retention—they do not authenticate who is on the receiving end.
Common Marketplace Scam Scenarios & Safe Responses
Buyer immediately demands your phone number or WhatsApp
The Tactic: Within minutes of listing, a buyer messages: “Is this available? Text my cell directly at 555-0142. I am ready to buy.”
Safe Response: “Yes, it is available! I keep all communications within the app for my safety and yours. Happy to answer any questions here.”
Buyer requests a verification code to “prove you are real”
The Tactic: The buyer claims they want to send an SMS code to verify your listing before paying or meeting.
Safe Response: Do not reply. Block the user immediately and report their profile for fraud. Never disclose any verification code sent to your phone.
Buyer sends a screenshot showing “payment sent” and demands shipment
The Tactic: Buyer provides an altered screenshot or spoofed email stating funds are held until tracking is provided.
Safe Response: Open your official payment app independently. If funds are not actively credited in your balance, do not ship: “I will dispatch the item as soon as the funds clear in my account balance.”
Buyer sends an overpayment check and asks you to refund the difference
The Tactic: A cashier's check arrives for $1,500 on a $500 item; the buyer asks you to wire $1,000 to their “shipping agent.”
Safe Response: Do not deposit the check. Take it to local law enforcement or postal inspectors. Checks from strangers on classifieds are almost universally counterfeit.
Buyer asks for pickup address before discussing terms
The Tactic: First message asks: “Where do you live? Send address.”
Safe Response: “I am located near [Major Intersection or Neighborhood]. Once we agree on price and a specific pickup time, I will provide the exact street address.”
Buyer demands photo of your driver's license for “trust”
The Tactic: Buyer asks you to photograph your ID alongside the item to prove ownership.
Safe Response: “I don't share government ID photos for privacy reasons. I am happy to take a photo of the item next to today's newspaper or a piece of paper with today's date written on it to confirm I have it.”
Quick Reference: Buyer Requests, Hidden Risks, and Safer Responses
Keep this summary in mind whenever communicating with prospective buyers:
| Buyer Request | Hidden Risk | Safer Response |
|---|---|---|
| “Text my cell phone directly” | Bypasses platform spam filters; exposes phone to smishing. | Keep messages within the marketplace app until pickup logistics require voice. |
| “Send the 6-digit code to prove you are real” | Account takeover or Google Voice identity hijacking. | Never share verification codes. Block and report immediately. |
| “What is your personal email address?” | Used to send spoofed fake-payment receipts or courier phishing emails. | Decline and provide your public payment cashtag or keep payment on-platform. |
| “Here is a screenshot showing payment sent” | Altered images or simulated transactions; funds were never sent. | Check your banking or payment app independently. Never trust screenshots. |
| “I overpaid by check; refund my movers” | Counterfeit check will bounce; you lose the wired funds completely. | Refuse checks. Never accept overpayments or wire refunds to strangers. |
| “Send photo of driver's license for trust” | Used for identity theft and impersonating you in future scams. | Refuse. Offer a date-stamped photo of the physical item instead. |
| “I will email you my own shipping label” | Allows buyer to alter destination address and invalidate seller protection. | Generate your own tracked shipping label to the verified address on file. |
What to Do If You Already Shared Sensitive Information
If you realize that you inadvertently provided personal information, a verification code, or credentials to an online scammer, take these immediate containment actions:
If You Shared a Verification Code:
If the code was for Google Voice, visit voice.google.com immediately, link your mobile number, and claim a forwarding number to revoke any unauthorized forwarding set up by the scammer. If the code was for your carrier (e.g., AT&T, Verizon, T-Mobile), contact carrier customer service immediately, set a strong account PIN, and confirm no SIM swap or device redirection was initiated.
If You Shared Account Passwords:
Change the password immediately on the affected platform and any other service where you reused that password. In the account settings, select “Sign out of all sessions” or “Revoke authorized devices,” and enable authenticator-app multi-factor authentication (MFA).
If You Shared Banking or Card Details:
Call your bank or credit card company's fraud department immediately (using the phone number on the back of your card). Request that the compromised card be canceled and reissued, or place a temporary freeze on your account if direct routing numbers were disclosed.
If You Shared Your Driver's License or SSN:
Place a free security freeze on your credit reports at all three nationwide credit bureaus (Equifax, Experian, and TransUnion) to prevent scammers from opening unauthorized accounts in your name. File an official identity theft report with the Federal Trade Commission at IdentityTheft.gov.
If You Already Sent Money or Merchandise:
Contact the payment service provider immediately to report the transaction as fraudulent, though peer-to-peer transfers are often non-refundable. File an internet crime report with the FBI's Internet Crime Complaint Center at IC3.gov and notify your local police department.
The Seller Safety Checklist
Before listing an item or meeting a buyer, review these essential precautions:
- Keep messages inside the marketplace app until pickup logistics require direct voice contact.
- Inspect listing photos to ensure no personal mail, prescription labels, or house numbers are visible in the background.
- Meet in a public, well-lit place (such as a police station safe-exchange zone) for portable items.
- For home pickups of bulky items, stage items in the garage and ensure another adult is present.
- Never read, text, or forward a six-digit verification code or authentication link to anyone.
- Verify payments directly inside your official banking or payment app—never rely on buyer screenshots or emails.
- Refuse checks from online buyers, and never agree to refund or wire money from an overpayment.
- Never send photos of your driver's license, passport, or government IDs directly to a buyer.
Frequently Asked Questions
Clear answers to common questions about communication safety, payment verification, and fraud prevention when selling online.
Authoritative Sources & Further Reading
For further official consumer security guidance, consult these government publications:
- Federal Trade Commission (FTC): How to Avoid a Scam When You Sell Online — Comprehensive consumer protection guide covering marketplace scams, fake payments, and verification fraud.
- Federal Trade Commission (FTC): Google Voice Scam: How the Verification Code Scam Works — Consumer alert explaining how scammers use six-digit SMS codes to hijack phone numbers and create fraudulent forwarding accounts.
- Federal Trade Commission (FTC): How to Spot, Avoid, and Report Fake Check Scams — Official overview of check-clearing timelines, counterfeit check red flags, and overpayment ruses.
- United States Postal Inspection Service (USPIS): Fake Check Scams & Online Classifieds — Detailed postal and courier fraud prevention guidance for person-to-person online commerce.
- Federal Bureau of Investigation (FBI) / IC3: Internet Crime Complaint Center (IC3) — Annual internet crime reports and incident reporting portal for online fraud and peer-to-peer payment scams.
- Cybersecurity and Infrastructure Security Agency (CISA): Recognizing and Reporting Phishing — Practical guidance under CISA's Secure Our World program on recognizing spoofed communications, urgent lures, and suspicious links.