Spot Marketplace Scammers: What One Click Reveals

The short answer up front: you can recognize most scammers on classifieds and marketplace platforms by a fixed pattern. They want to move away from the platform's chat as quickly as possible, push for payment through some supposed "shipping service", write in stilted, broken language from a foreign phone number, and send you a link where you should "just quickly confirm your details". The moment someone tries to lure you off the safe messaging channel before anything has even been sold, that's the clearest warning sign there is.

Whether the person on the other end is really writing from where they claim is something you can't settle with absolute technical certainty — but you can sanity-check it. If you send a link yourself (say, to a photo of the item) and see which region and which provider the click came from, you get a clue. A click from a faraway country while someone claims to be writing "from Hamburg" doesn't add up.

One important thing right at the start, because this topic can easily tip over: a click reveals region and provider — not an address and not a name. This is a tool for protecting yourself against fraud — not a tool for finding, monitoring or tracking a person.

The 5 Most Common Scam Patterns on Classifieds Platforms

These schemes have been circulating for years in ever-new variations. Once you know them, you'll recognize them in the very first message:

The shipping-service trick. The "buyer" insists on shipping instead of pickup and proposes a specific payment or delivery service. Shortly after, you receive a deceptively real-looking link where you're supposed to enter your bank or card details "to release the payout". The page is fake, and the money in question is yours — the goal is to harvest your details, not to pay you.
The overpayer. Someone supposedly transfers too much and asks you to refund the difference. The original payment was never real or gets reversed later — your refund, on the other hand, is very real and gone.
The off-platform push. Right after the first message, the conversation is supposed to continue on a messenger app or via SMS. That way the scammer escapes the platform's protection mechanisms and reporting functions.
Too good to be true. The buyer pays full price without haggling, asks no questions about the item, and is in a remarkable hurry. Real buyers haggle and ask for details.
The phishing confirmation link. "Please just confirm via this link that you're reachable / that the listing is still active." The link leads to a fake login page that steals your platform credentials.

Remember the rule of thumb: anyone who applies pressure, dodges questions or sends links asking for your details before any deal has happened is very likely not a real buyer.

The Tech Check: Send a Link and Read the Click

Suppose you're suspicious but not sure. A legitimate self-defense step is to send the other person a harmless link of your own — for example, to an extra photo of the item — and see whether the click matches the story you're being told.

That's exactly what Track & Short is built for: you turn any URL into a short disguised link and get a private dashboard. When someone clicks it, you see:

Region and provider derived from the IP address (roughly: the country/area and which internet or mobile carrier was used)
Device and browser (smartphone or desktop, which operating system)
the exact time of the click
an approximate location on a map and a live feed showing clicks the moment they happen
bot detection and a proxy/VPN warning in case the connection is being disguised

All of this works without a login, and the data deletes itself automatically — so no permanent profile is ever created. For the question "does this add up or not?", that one look is all you need.

Concretely, it helps like this: if someone claims to be writing from a German city but the click comes from an entirely different country, that's a strong red flag. If the proxy/VPN warning shows the origin is being actively disguised while you're being fed a perfectly ordinary private-buyer story, that often doesn't add up either.

What the Data Means — and What It Does NOT Prove

Here, honesty matters more than quick certainty. A click is a clue, not proof. What you get:

Region, not address. An IP roughly places an area or the location of a provider — not an apartment, not a street, not a name. Anyone promising more is overselling.
Provider, not person. You see the internet or mobile carrier, not who is behind it.
A moment, not a movement profile. You see one click at one time, not where someone goes.

And critically: VPN does not automatically mean scammer. Plenty of people use a VPN purely for privacy, browse through company networks, or happen to be abroad. A VPN warning is a reason for extra caution — not a verdict. Always judge the overall picture: payment pressure plus off-platform push plus mismatched origin plus phishing link adds up to a clear pattern. A single signal on its own does not.

Conversely, a click "from Germany" doesn't prove everything is legitimate — scammers can operate through German servers or mobile networks too. The tech check reliably exposes the clumsy cases, but it never replaces your common sense.

The Legal Side and a Word on Fairness

This isn't legal advice — when in doubt, ask a consumer advice center (in Germany: the Verbraucherzentrale) or a lawyer. A few guiding lines you can orient yourself by:

Sharing a link of your own for self-protection and seeing the rough origin of a click is something entirely different from deliberately spying on a person. Purpose matters: fending off fraud, not tracking someone down.
Don't collect more than you need for this one decision, and don't keep the data longer than necessary. Track & Short's automatic self-deletion fits exactly this principle of data minimization.
Never use a tool like this to track a person you know, trick them into clicking under false pretenses, or covertly monitor them. That's neither the purpose nor fair — and depending on the case, not legal either.

Fair use in one sentence: defend yourself against fraud, but never make a person your target. A region-and-provider check against an anonymous "buyer" trying to rip you off is self-defense. Anything that drifts toward surveilling an individual is not.

What to Do Once You've Spotted a Scam

When the warning signs pile up, act calmly and firmly:

Never pay anything upfront. Don't refund any money, don't enter card or bank details on links you were sent, don't pay any "release fee".
Stay in the platform's chat. Don't let yourself be pulled onto a messenger app or SMS. The official messaging channel protects you and documents everything.
Don't click suspicious links, and never enter credentials anywhere. When in doubt, type the platform's real address into your browser yourself instead of following a link someone sent you.
Block and report. Use the platform's reporting function. If you've suffered actual damage or faced a clear fraud attempt, you can also file a police report.
Warn others when you can. A reported profile protects the next person who receives the same message.

Bottom Line

Most marketplace scammers give themselves away through a recurring pattern: payment pressure, the off-platform push, phishing links, and a story that sounds a little too smooth. A simple tech check can round out that picture — a tracking link you send yourself shows you the region and provider of a click and exposes it when origin and story don't match. Treat the result as a clue, not as proof, and use it exclusively for self-protection. If you want to try it, Track & Short lets you create a disguised link for free and without a login, and read the click in a private, self-deleting dashboard.

Frequently Asked Questions

What's the fastest way to recognize a fake buyer on a classifieds platform?

Most reliably by their behavior: they push for payment through some "shipping service", want to leave the platform chat quickly, send links asking for your details, and are conspicuously in a hurry without asking about the item. When several of these signals come together, it's almost always a scam attempt.

Can a link tell me whether the other person is really writing from where they claim?

You get a clue, not certainty. If you send your own tracking link, you see the region and provider of the click. If the click comes from a completely different country than claimed, that's a strong red flag. But a click from the "right" country doesn't prove everything is genuine either.

What does a link click technically reveal about me or the other person?

From the IP, you can roughly derive the region and the internet or mobile carrier, plus the device, browser and time of the click. What a click does not reveal: a person's exact address, name, or movement profile. It stays at an approximate origin.

Does a VPN warning automatically mean someone is a scammer?

No. Many people use a VPN purely for privacy, are online through a company network, or are simply abroad. A VPN or proxy warning is a reason for extra caution, but not proof. What matters is the overall picture built from multiple signals.

Is a tracking link like this legal and fair?

Sharing a link of your own to protect yourself from fraud and seeing the rough origin of a click is something different from deliberately spying on a person — collect only what you need for this one decision and delete it afterwards. You may not use a tool like this against a person you know or for surveillance. This isn't legal advice; when in doubt, a consumer advice center (Verbraucherzentrale) can help.