Facebook Marketplace Scams That Target Car Sellers
The scams that come at you as a Marketplace seller aren't after the car. They're after your Facebook account or your card number, and nobody has to take a vehicle for you to lose.
Four plays do almost all the damage to people selling vehicles: the verification-code request, which is an account takeover rather than a payment scam; the fake payment screenshot; the overpayment or bad-check refund; and the "pull a VIN report from this site first" setup. Selling at a store covers the money side, because the deal gets written in F&I. Nothing covers the account side.
Why is every Marketplace scam guide written for buyers?
Search this and you get antivirus-company listicles aimed at somebody buying a used couch. AARP's guide is one of the few that names seller-side plays at all, and it still isn't written for anyone moving units for a living. Meta files the car advice on the wrong side too: its page about scams on Facebook Marketplace puts its only vehicle line under the heading Additional tips for buyers. "Do not send deposits for high value items (apartments, cars, etc.) without confirming that they're real first."
Sound advice. Useless to you. You have the car.
The bill is different on your side too. A private seller who gets taken loses one transaction. A salesperson who loses the Facebook profile loses every active listing and every buyer thread in Messenger. That's why the account scams matter more to you, even though the money scams get all the coverage.
Why would a buyer ask you for a verification code?
It shows up early. Somebody asks about a unit, wants your cell number, then texts a six-digit code and asks you to read it back. The story is always some version of "I've been burned by fake listings, I just want to know you're real." From the FTC's alert on the Google Voice verification code scam: "Scammers target people who post things for sale on sites like Craigslist or Facebook Marketplace." Hand over the code and "they'll try to use it to create a Google Voice number linked to your phone number." The rule has no exceptions in it: "No matter what the story is, don't share your Google Voice verification code — or any verification code — with someone if you didn't contact them first. That's a scam, every time." Meta files the same ask under phishing, next to anyone asking for your account information or password.
Here's the version that should worry a rep. Sometimes it isn't a Google Voice code. It's your Facebook login code, and it arrived because somebody is sitting at the login screen with your email already typed in. Read six digits into a chat window and the profile carrying your name, your listings and your buyer conversations belongs to someone else. No real buyer needs a code from you.
How do the fake-payment plays work?
They're one family. The buyer produces proof of payment, and the proof is manufactured. Meta lists the patterns on its scams page:
- "Buyers sending you screenshots of payments—requesting that you send them the item(s) because they've already paid."
- "Buyers claiming they've accidentally overpaid you and requests that you refund them the overpayment."
- "Buyers requesting refunds without actually paying."
The check version is the nastiest, because your own bank makes it look genuine for a while. The FTC's guide to fake check scams spells out why: "By law, banks have to make deposited funds available quickly. Even if you see the funds in your account, that doesn't mean it's a good check." Fake checks "can take weeks to be discovered and untangled," and by then "you're stuck paying the money back to the bank." Their test is one line. "Don't accept a check for more than the selling price."
The good news is specific to you: a rep has a defense a private seller doesn't, and it's the store. The buyer comes in, the deal gets written, the money runs through F&I like any walk-in. So when a thread pushes toward Zelle, or toward a check mailed ahead of anyone laying eyes on the unit, you don't have to win an argument. You say the deal gets written at the store. All three scams need money moving outside that process, so all three die there.
| What the message says | What it's actually after | What it costs you | Your one move |
|---|---|---|---|
| "Send me the code so I know you're real" | Your phone number, or your account | The profile every listing lives on | Never read out a code. Stop replying. |
| Screenshot showing a completed payment | The unit, before you check | A unit gone, unpaid | Confirm in your own account, never in their picture |
| "I overpaid, send back the difference" | Real money against a fake deposit | Whatever you refund, plus the bank clawback | Never refund an overpayment |
| "Run a report from this site first" | Your card number | About $20, and the card | Send the store's own report |
Does Facebook cover you if a Marketplace deal goes bad?
Most people assume there's a backstop. On a vehicle there isn't. Meta's page on how Purchase Protection works covers orders bought with checkout on Facebook, then draws the line: "Purchases made through third-party sites, local pickups, Messenger transactions, or through other messaging services don't qualify for Purchase Protection." Every car deal on Marketplace is a local pickup arranged in Messenger, so the whole transaction sits outside coverage, for you and the buyer both. That's why the payment rules above aren't preferences.
The VIN report ask is the one that gets reps for real money
This play is aimed squarely at people selling vehicles online, and it's the likeliest one here to hit your own pocket. A "buyer" wants a history report before they'll commit, and names the exact site you have to use. The FTC described the mechanics in its alert on vehicle history report scams: "They ask the seller to get the report from a specific website, where the seller needs to enter some information and pay about $20 by credit card for the report. The seller then sends it to the supposed buyer but never hears back."
The detail almost nobody repeats is the web address. The FTC found sellers were "automatically redirected to sites ending in '.vin'," which reads like it must mean vehicle identification number. It doesn't. That domain, in the FTC's words, "was intended to be used for sites that relate to wine, since 'vin' is the French word for wine." A .vin address tells you nothing about who runs the site.
Twenty dollars is the cheap part. The expensive part is card details typed into a site you'd never heard of, chosen by a stranger who contacted you. The FTC points to vehiclehistory.gov, run by the National Motor Vehicle Title Information System, which "lists NMVTIS-approved providers of vehicle history reports." That address now redirects to vehiclehistory.bja.ojp.gov. Your store already pays for a report product. Send that one.
What happens when somebody clones your listing?
One category never touches your money and still ends up on your desk. Fake vehicle ads are an industry with real scale behind them. The FBI's Internet Crime Complaint Center, in its announcement on fraudulent online vehicle sales, reported that "from May 2014 through December 2017, the IC3 received approximately 26,967 complaints with adjusted losses of $54,032,396." Those ads run on photos of vehicles the seller never had.
The FBI doesn't say where the photos come from, and we won't pretend we know. What we can measure is what a listing publishes. Across 29,969 vehicles imported through autobook.io over a trailing 90-day window — every vehicle record created in that window, across all accounts — the median unit carried 20 photos. A full set of a real car at a real price, in public, free to right-click.
You usually find out when somebody calls the store furious about a deposit nobody there ever took. Meta's route is on its report a Marketplace scam page: open the listing, use the options menu, Report Listing, then Scam.
What do you do when one of these lands?
Reporting a scam buyer is clumsier than it should be. Meta's documented path runs, word for word, "From your Feed, in the left menu, click Marketplace. Click Selling. Click Your Account. Click Seller dashboard. Click a listing the buyer purchased." Most of these people never purchased anything. They sent one message and vanished, so the official flow doesn't fit the ordinary case. Report and block the profile from inside the thread and get on with your day.
- If you read out a code, treat it as an account incident, not an embarrassment. Meta's hacked account page tells you to "visit www.facebook.com/hacked on a device you've used to log into Facebook before." Do that first, then change the password and check two-factor. For a Google Voice code, the FTC links to Google's steps for reclaiming your number.
- If money actually moved, report it at ReportFraud.ftc.gov and tell your manager the same day.
- Don't fight in the thread. Scammers report back, and you gain nothing by handing a stranger a reason to file against the profile your whole book of business sits on. If your listings are already misbehaving, that's our guide to Marketplace listing problems.
And don't answer any of this by spinning up a second profile to keep the "real" one clean. Running more than one account is the fastest way to lose both — more on what keeps a posting account healthy in our breakdown of whether Marketplace posting tools are safe.
Where autobook.io fits, which is narrower than you'd expect
Honest answer: barely. autobook.io doesn't read your messages or reply to anybody. There's no inbox and no AI replies in the product. Every conversation on this page is one you handle yourself in Messenger, so none of the advice above is a feature we're quietly selling you.
The one real connection is account custody. The verification-code scam is a takeover attempt pointed at people who post vehicles, which makes it worth knowing who else can reach your account. autobook.io never asks for your Facebook password and never operates an account on your behalf. Posting runs inside your own signed-in Chrome session, on your machine, under your profile. There's nothing for us to hand over, because we never held it.
The product handles the volume part: import your store's inventory off the dealership website, write a description per unit you can edit before it goes out, post through your own browser into the Facebook groups you pick. Plans from $99/month. The accuracy of your listings, Facebook's Commerce Policies and your local dealer-advertising rules stay your responsibility, and so does sorting real buyers from time-wasters — about 40 minutes a day of replying. For what that day looks like, read Facebook Marketplace for car salespeople, and for first replies that don't read like a bot, our Marketplace message templates.
Frequently asked questions
Can you get scammed as a seller on Facebook Marketplace?
Yes, and the seller versions look nothing like the buyer ones. Nobody is trying to drive off in the car. They want a verification code, a refund against a payment that was never real, or card details on a report site they picked. The money plays mostly fail against a dealership. The account plays don't care where you work.
Why do buyers on Marketplace ask for a verification code?
Real buyers don't. The FTC's position is that a code request from somebody you didn't contact first is a scam every time. One version builds a Google Voice number on your phone number so the scammer can work other people while looking like you. The worse version is somebody at a Facebook login screen with your email in the box, waiting on the code that lets them in.
What's the safest way to take payment for a car on Marketplace?
Through the store, the way any deal gets written. Confirm money in your own account rather than in a screenshot somebody sent you, and never refund an overpayment. Purchase Protection doesn't apply here at all, because local pickups and Messenger transactions are excluded from it.
Is Facebook Marketplace safe for car sellers?
Safe enough to run a pipeline on, as long as you treat the account as the asset. Listings are free and the buyer volume is real. The failure mode isn't losing a vehicle, it's losing the profile every listing sits under.
Someone copied my listing. Can I get it taken down?
Report it as a listing scam: open the listing, use the options menu, choose Report Listing, then Scam. Meta doesn't publish what happens after you submit or how long it takes, so don't sit waiting on it.