Scam listings at scale in Classifieds marketplaces

How the attack works

1. The operator enters the advert-posting journey with a convincing property, vehicle or job offer designed to make users enquire before checking the details.
2. Multiple poster accounts are registered through separate contact details and sessions, giving the operation more places to publish and return after removal.
3. Automated posting repeats the offer or variations of it, often using copied photographs and descriptions to make the listings appear credible.
4. Interested users are directed towards a deposit, an application fee or a request for personal information, sometimes outside the platform’s visible conversation.
5. Reports arrive after users recognise the deception, while related accounts continue posting and moderators work out which adverts belong to the same pattern.

Why it gets through

Classifieds bring together people making consequential decisions with incomplete information. A rental listing, used vehicle or job opportunity can create urgency long before either party has been verified. Scammers exploit that gap with plausible adverts and repeated registrations, using the marketplace’s reach to start conversations that may quickly move beyond the platform’s own transaction or messaging controls.

The visible advert is only part of the operation. Account creation, posting and later contact activity may be reviewed separately, while altered text or a new account name makes each case appear fresh. An investigator who sees only the reported listing can miss earlier registrations and related posting sessions that would help establish the wider scope of the abuse.

High posting volume alone is not enough to identify a scam. Letting agents, recruiters and vehicle businesses may legitimately manage many adverts and share working environments. Account relationships and request patterns need to be considered alongside the listing information supplied by the classifieds business, with moderation retaining responsibility for checking the actual offer and deciding what should remain published.

Fraud-related report volume reflects the users who return with concerns about deposits, application payments or misleading offers. Even when the final exchange happened elsewhere, the advert provided the introduction. Support needs to establish which records are available and explain the platform’s role, while avoiding the assumption that every affected user will submit a report.

Moderation cost per listing increases when teams repeatedly remove adverts, investigate posters and compare new complaints with earlier cases. Replacement registrations can restart that work under a different identity. The expense continues after an advert disappears, and the time diverted to repeat investigations can leave genuine business listings waiting for review.

Lister retention can weaken when a category becomes associated with scams and honest advertisers receive fewer useful enquiries. A large listing count may conceal businesses that no longer return after their first advert. Follow repeat posting and lister feedback alongside abuse reports, so supply growth is judged by the relationships it sustains rather than volume alone.