惯性聚合 高效追踪和阅读你感兴趣的博客、新闻、科技资讯
阅读原文 在惯性聚合中打开

推荐订阅源

酷 壳 – CoolShell
酷 壳 – CoolShell
H
Hacker News: Front Page
P
Palo Alto Networks Blog
T
ThreatConnect
Apple Machine Learning Research
Apple Machine Learning Research
博客园_首页
T
True Tiger Recordings
P
Privacy & Cybersecurity Law Blog
B
Blog
IT之家
IT之家
Last Week in AI
Last Week in AI
F
Full Disclosure
Hacker News: Ask HN
Hacker News: Ask HN
C
Comments on: Blog
Microsoft Azure Blog
Microsoft Azure Blog
C
Cybersecurity and Infrastructure Security Agency CISA
Microsoft Security Blog
Microsoft Security Blog
博客园 - 【当耐特】
N
News and Events Feed by Topic
NISL@THU
NISL@THU
腾讯CDC
雷峰网
雷峰网
Security Latest
Security Latest
李成银的技术随笔
M
Microsoft Research Blog - Microsoft Research
L
LangChain Blog
L
Lohrmann on Cybersecurity
cs.CL updates on arXiv.org
cs.CL updates on arXiv.org
C
Check Point Blog
Y
Y Combinator Blog
Recent Announcements
Recent Announcements
博客园 - Franky
N
News | PayPal Newsroom
V
V2EX
A
About on SuperTechFans
The Register - Security
The Register - Security
月光博客
月光博客
奇客Solidot–传递最新科技情报
奇客Solidot–传递最新科技情报
Google Online Security Blog
Google Online Security Blog
MyScale Blog
MyScale Blog
Cisco Talos Blog
Cisco Talos Blog
Vercel News
Vercel News
WordPress大学
WordPress大学
C
Cyber Attacks, Cyber Crime and Cyber Security
The Hacker News
The Hacker News
IntelliJ IDEA : IntelliJ IDEA – the Leading IDE for Professional Development in Java and Kotlin | The JetBrains Blog
IntelliJ IDEA : IntelliJ IDEA – the Leading IDE for Professional Development in Java and Kotlin | The JetBrains Blog
爱范儿
爱范儿
A
Arctic Wolf
L
LINUX DO - 最新话题
freeCodeCamp Programming Tutorials: Python, JavaScript, Git & More

WeLiveSecurity

The quest for greater tech independence Why geopolitical turmoil is a gift for scammers, and how to stay safe FrostyNeighbor: Fresh mischief and digital shenanigans Eyes wide open: How to mitigate the security and privacy risks of smart glasses Fake call logs, real payments: How CallPhantom tricks Android users Fixing trivial passwords is as easy as 123456 A rigged game: ScarCruft compromises gaming platform in a supply-chain attack This month in security with Tony Anscombe – April 2026 edition The calm before the ransom: What you see is not all there is GopherWhisper: A burrow full of malware New NGate variant hides in a trojanized NFC payment app Ransomware’s back office: What the ransom note won’t say Why that next data breach alert could be a trap Supply chain dependencies: Have you checked your blind spot? Recovery scammers hit you when you’re down: Here’s how to avoid a ‘second strike’ As breakout time accelerates, prevention-first cybersecurity takes center stage Digital assets after death: Managing risks to your loved one’s digital estate This month in security with Tony Anscombe – March 2026 edition RSAC 2026 wrap-up – Week in security with Tony Anscombe A cunning predator: How Silver Fox preys on Japanese firms this tax season Virtual machines, virtually everywhere – but not all protected Cloud workload security: Mind the gaps Move fast and save things: A quick guide to recovering a hacked account EDR killers explained: Beyond the drivers Face value: What it takes to fool facial recognition Cyber fallout from the Iran war: What to have on your radar Sednit reloaded: Back in the trenches What cybersecurity actually does for your business How SMBs use threat research and MDR to build a defensive edge Protecting education: How MDR can tip the balance in favor of schools This month in security with Tony Anscombe – February 2026 edition Mobile app permissions (still) matter more than you may think Faking it on the phone: How to tell if a voice call is AI or not PromptSpy ushers in the era of Android threats using GenAI Is it OK to let your children post selfies online? Naming and shaming: How ransomware groups tighten the screws on victims Taxing times: Top IRS scams to look out for in 2026 OfferUp scammers are out in force: Here’s what you should know A slippery slope: Beware of Winter Olympics scams and other cyberthreats This month in security with Tony Anscombe – January 2026 edition DynoWiper update: Technical analysis and attribution Love? Actually: Fake dating app used as lure in targeted spyware campaign in Pakistan Drowning in spam or scam emails lately? Here’s why ESET Research: Sandworm behind cyberattack on Poland’s power grid in late 2025 Children and chatbots: What parents should know Common Apple Pay scams, and how to stay safe Old habits die hard: 2025’s most common passwords were as predictable as ever Why LinkedIn is a hunting ground for threat actors – and how to protect yourself Is it time for internet services to adopt identity verification? Your information is on the dark web. What happens next? Credential stuffing: What it is and how to protect yourself This month in security with Tony Anscombe – December 2025 edition A brush with online fraud: What are brushing scams and how do I stay safe? Revisiting CVE‑2025‑50165: A critical flaw in Windows Imaging Component LongNosedGoblin tries to sniff out governmental affairs in Southeast Asia and Japan ESET Threat Report H2 2025 Black Hat Europe 2025: Was that device designed to be on the internet at all? Black Hat Europe 2025: Reputation is currency – even in the ransomware economy Locks, SOCs and a cat in a box: What Schrödinger can teach us about cybersecurity Seeking symmetry during ATT&CK® season: How to harness today’s diverse analyst and tester landscape to paint a security masterpiece The biggest catch: How whaling attacks target top executives Phishing, privileges and passwords: Why identity is critical to improving cybersecurity posture MuddyWater: Snakes by the riverbank Oversharing is not caring: What’s at stake if your employees post too much online This month in security with Tony Anscombe – November 2025 edition What parents should know to protect their children from doxxing Influencers in the crosshairs: How cybercriminals are targeting content creators MDR is the answer – now, what’s the question? The OSINT playbook: Find your weak spots before attackers do PlushDaemon compromises network devices for adversary-in-the-middle attacks What if your romantic AI chatbot can’t keep a secret? Can password managers get hacked? Here’s what to know Why shadow AI could be your biggest security blind spot In memoriam: David Harley The who, where, and how of APT attacks in Q2 2025–Q3 2025 ESET APT Activity Report Q2 2025–Q3 2025 Sharing is scaring: The WhatsApp screen-sharing scam you didn’t see coming How social engineering really works | Unlocked 403 cybersecurity podcast (S2E6) Ground zero: 5 things to do after discovering a cyberattack This month in security with Tony Anscombe – October 2025 edition Fraud prevention: How to help older family members avoid scams Cybersecurity Awareness Month 2025: When seeing isn't believing Recruitment red flags: Can you spot a spy posing as a job seeker? How MDR can give MSPs the edge in a competitive market Cybersecurity Awareness Month 2025: Cyber risk thrives in the shadows Gotta fly: Lazarus targets the UAV sector SnakeStealer: How it preys on personal data – and how to stay safe Cybersecurity Awareness Month 2025: Building resilience against ransomware Minecraft mods: When ‘hacking’ your game becomes a security risk IT service desks: The security blind spot that may put your business at risk Cybersecurity Awareness Month 2025: Why software patching matters more than ever AI-aided malvertising: How chatbots can help spread scams How Uber seems to know where you are – even with restricted location permissions Cybersecurity Awareness Month 2025: Passwords alone are not enough The case for cybersecurity: Why successful businesses are built on protection Beware of threats lurking in booby-trapped PDF files Manufacturing under fire: Strengthening cyber-defenses amid surging threats New spyware campaigns target privacy-conscious Android users in the UAE Cybersecurity Awareness Month 2025: Knowledge is power This month in security with Tony Anscombe – September 2025 edition
Is Poshmark safe? How to buy and sell without getting scammed
2026-02-19 · via WeLiveSecurity

Social commerce has gone mainstream. According to one estimate, the industry was on track to be worth over $1.1 trillion globally in 2025, with over half of young people buying on social media sites. But wherever money and users are to be found online, so are fraudsters and cybercriminals. So it is with Poshmark: a popular California-based social commerce platform that allows users to trade new and second-hand items such as clothing, accessories, and home goods.

Whether you’re buying or selling on the app, it’s important to remember that scammers are everywhere – and they want your data, your money and your goods.

Why is Poshmark a scammer’s favorite?

Poshmark has become a popular target for scammers due to several factors.

High commission fee

A 20% Poshmark commission for items over $15 means users are only too happy to complete deals off the platform. The problem is that scammers know this, and will often suggest that they do so, which exposes victims to phishing, fake payment confirmation and other types of fraud.

Counterfeit goods

Poshmark users mainly trade in fashion items, especially at the luxury end of the market, meaning many are exposed to counterfeits. Although Poshmark will authenticate certain items as part of its value-add services, it only does so for goods over $500.

Seller beware

Poshmark offers Posh Protect, meaning that buyers receive a full refund if their item never ships or doesn’t match the listing description. But what if it is the buyers who are the bad guys? Sellers can be targeted by refund scams claiming items are missing or damaged.

One-and-done accounts

It’s easy to open an account on Poshmark. But that ease-of-use and onboarding means it’s simple for scammers to create new accounts which are only used (fraudulently) once.

Restricted communications

Poshmark doesn’t allow users to chat privately – only via public comments on listings. This creates an opportunity for scammers to move conversations off platform as soon as possible, where victims are more exposed.

What are the most common scams?

Look out for the following:

Phishing

Fraudsters send you emails purporting to come from Poshmark, but which are designed to elicit personal, financial and log-in information, or trick you into installing malware. They might try to create a sense of urgency to rush you into making a poor decision by claiming your account will be deactivated, or that they need to check a non-existent transaction you made.

Alternatively, scammers posing as buyers or sellers might suggest moving a transaction off platform. They might say it’s worth doing this to avoid the 20% commission, or that images of your product aren’t loading properly. Once it has moved to email/mobile, they may send you a phishing message designed to install malware or steal persona/financial info.

Some users have also reported scammers posting malicious or suspicious links in the app.

poshmark-one
Source: Reddit

Off-platform payment scam  

Similar to the above, a buyer or seller suggests moving the transaction off Poshmark to avoid paying the 20% commission. But this means that you may be at risk of paying without receiving an item. Or shipping an item, having been sent a fraudulent payment confirmation.

Non-delivery scams

Buyers purchase a bundle of items from your “closet” and claim one or some are missing. Poshmark usually demands a refund and return, but this means the scammer keeps the original items they claimed were missing. Another variation is for the buyer to purchase an item with high-value accessories which they claim didn’t arrive, and end up keeping (eg controllers for a gaming console).

Poshmark support scams

A buyer contacts you with a phishing link purporting to come from Poshmark support claiming there’s a problem with your transaction. Following it could lead to a malicious download or phishing page.

poshmark-reddit.jpg
Source: Reddit

Counterfeit scams

This one can work both ways. Buyers might claim that the item you shipped was damaged, and send back an inferior or counterfeit version of that item. Without proof, you have to reimburse them, and they get to keep the original. Alternatively, a seller might sell a counterfeit item for just under the $500 threshold, over which Poshmark checks for authenticity.

How to spot a Poshmark scam

The good news is that, with a few golden rules in mind when using the site, you can steer clear of the scammers. They will usually try to get you off the site one way or another, and/or send malicious links masquerading as legitimate messages and alerts. Buyers may also pressure you into shipping an item, even providing fake screenshots of payment confirmation, before funds clear in your Poshmark account.

On the other side, scammers may sell items at just under the $500 threshold for authenticity checks, or at a price that seems too good to be true. Also look out for generic descriptions and stock photos – a sure sign of counterfeit items.

What to do if you got scammed

The most important thing to remember is that Poshmark will only step in if your entire transaction has been completed on the platform.

Buyers

You only have three days after delivery to complain about an item. Open a case and upload photos of the item (in the case of damaged/counterfeit claims). If an item never arrived, contact Poshmark support with the relevant tracking details. Posh Protect will cover all lost packages shipped with their prepaid label.

Go to: My Purchases – select the order – Problems/Order Inquiry – Select reason – Upload evidence.

Sellers

Your best protection against buyer fraud is to document everything (photos, tags, packaging, serial numbers and a photo of an item with the Poshmark label on it).

It’s also possible to report fraud (even if you won’t be reimbursed) by going to the scam account – Action MenuReport User.

Contact your bank/card provider to report any fraudulent transactions. And if it was a high-value item, consider filing a report with the FTC.

Staying safe on Poshmark

Of course, it’s better never to get into a position where you have to try and recoup losses. Ensure you always stay on the Poshmark app, check the profile of any buyer or seller you’re thinking of transacting with (including “love notes”), and avoid following links off platform. Also, never trust screenshotted payment confirmation.

Above all, remember that if something looks too good to be true, it usually is. There may be bargains to be had on social commerce platforms like Poshmark. But there are also scammers circling in growing numbers.