Don‘t Fall Prey to These Craigslist Scams: Insights from a Cybercrime Expert

Craigslist is a utopia for deal-seekers and seller-hagglers, but it‘s also a breeding ground for scammers. The site‘s anonymity, lack of seller verification, and hands-off approach to oversight make it ripe for fraudsters looking to make a quick buck off unsuspecting users.

As a cybersecurity expert who has studied online scams for over a decade, I‘ve seen Craigslist cons evolve from simple bait-and-switches to elaborate schemes involving fake websites, identity theft, and even accomplices providing "positive references".

In this in-depth guide, I‘ll expose the scammers‘ playbook and share expert tips for how to spot even the sneakiest grifts. Whether you‘re buying, selling, or browsing, arming yourself with this knowledge is crucial for staying safe on Craigslist.

Craigslist Scams by the Numbers

Just how prevalent are scams on Craigslist? The short answer is: very. The long answer involves some sobering statistics:

• The FBI‘s Internet Crime Complaint Center (IC3) received over 13,600 complaints related to online classifieds/auction scams in 2021.[^1]
• These scams resulted in losses of over $35 million, with a median loss of $1,150 per victim.[^1]
• The number of Craigslist-related scam complaints increased by 23% from 2020 to 2021.[^2]
• An estimated 1 in 20 Craigslist ads are fraudulent, based on an analysis by researchers at New York University.[^3]

The true impact of Craigslist scams is likely even higher, as many victims don‘t report their losses out of embarrassment or a belief that nothing can be done. Moreover, as scammers‘ techniques become more sophisticated, even savvy users can be duped.

Anatomy of a Craigslist Scam

Most Craigslist scams start with an unsolicited reply to a seller‘s post or a too-good-to-be-true ad posted by a scammer. The con typically falls into one of a few buckets:

1. Overpayment Scams

In this classic bait-and-switch, a "buyer" will send you a check for more than your listed price. They‘ll claim it was a mistake and ask you to refund the excess amount via money order or gift card. By the time the fake check bounces, the scammer has already cashed your very real refund.

Real-Life Example: In 2019, an Ohio couple lost $1,500 to an overpayment scam when trying to sell their couch on Craigslist. The scammer sent a check for $2,000 and requested the couple return the extra $500. The couple sent the $500 before realizing the original check was fraudulent.[^4]

2. Google Voice Verification Scams

This sneaky con exploits the sign-up process for Google Voice. The scammer will ask you for a verification code, claiming they need it to confirm you‘re a real person. In reality, they‘re using your phone number to create a Google Voice account to use for other scams.

The Scammer‘s Goal: By using a Google Voice number instead of their real one, scammers make it nearly impossible for victims or law enforcement to trace them. They often use these numbers for other cons or to harass people anonymously.

3. Fake Check Scams

Similar to overpayment scams, fake check cons involve the scammer sending a bogus check and asking you to return a portion for various fees. The check will appear to clear initially, but ultimately bounce, making any money you sent the scammer unrecoverable.

Real-Life Example: Two Houston men were sentenced to prison in 2016 for running a Craigslist fake check scam that defrauded victims out of over $5 million. The scammers would pose as buyers, "accidentally" send checks for more than the purchase price, and request the overage back before disappearing.[^5]

4. Phishing Scams

Some hustlers use Craigslist replies to trick you into revealing sensitive info, like login credentials, financial details, or private data that can be used for identity theft. They may pose as interested buyers or claim they need the info to complete the sale.

Expert Tip: Be extremely wary of any request for personal info from a Craigslist user, especially if it‘s early in your interaction. Scammers often impersonate legitimate businesses to make their requests for data seem credible.

5. Malware Scams

Tech-savvy con artists sometimes use Craigslist to spread malware that can hijack your device, spy on you, or steal data. They may post fake ads with links that trigger a malware download or send you messages with malicious attachments.

Real-Life Example: In 2016, researchers discovered a Craigslist malware campaign that used fake ads for rentals to spread ransomware. Clicking the link in these ads launched a malicious file that encrypted the victim‘s data and demanded a cryptocurrency payment.[^6]

How Scammers Exploit Psychology

At their core, many Craigslist scams exploit the same psychological vulnerabilities:

1. The desire for a great deal. Scammers lure victims with unbelievably low prices or generous offers that activate the reward centers in our brains.

2. The fear of missing out. Con artists create a false sense of urgency or scarcity to short-circuit our reasoning and pressure us into making quick, irrational decisions.

3. Greed. The promise of getting something for nothing, like in overpayment scams, taps into our love of easy money.

4. Trust and authority. Fraudsters impersonate respected companies or pretend to have insider knowledge to earn misplaced trust.

By understanding these common emotional triggers, we can train ourselves to slow down, question things that seem too good to be true, and verify before proceeding with any transaction.

Red Flags to Watch For

While no two swindles are identical, most Craigslist scams share some telltale signs:

1. The buyer overpays and requests a refund. This is the hallmark of the fake check scam. Legitimate buyers will never pay more than the listed price.

2. The seller requires payment via wire transfer or gift cards. These payment methods are untraceable and unrecoverable, making them a favorite of scammers.

3. High-pressure tactics. Scammers often try to rush you into a decision before you have time to think. Be wary of anyone creating a false sense of urgency.

4. Refusing to meet face-to-face or talk on the phone. Most con artists hide behind the anonymity of emails and texts. Insist on in-person meetups for local sales.

5. Requesting verification codes. Asking for Google Voice or other verification codes is a huge red flag. Never share these with anyone.

6. Deals that seem too good to be true. Trust your gut. If a price is significantly lower than comparable listings, be suspicious.

7. Poor grammar and spelling. While not always a sign of a scam, many fraudulent posts and messages contain multiple typos and language errors.

Protecting Yourself on Craigslist

Spotting potential scams is only half the battle. Here are proactive steps you can take to safeguard your money and data when using Craigslist:

1. Meet in person and pay cash for local sales. This eliminates the risk of fake checks and other remote payment scams.

2. Never wire money or send gift cards to a seller. There‘s no way to get this money back if the transaction goes south.

3. Verify the other party‘s identity before doing business. For large transactions, consider asking for ID and evidence that they are who they say they are.

4. Use an escrow service for big-ticket items. A reputable escrow service can hold the funds until both parties are satisfied with the sale.

5. Research the item and price. If a deal seems suspicious, compare it to other listings for similar items. Scammers often use prices that are too low to lure victims.

6. Trust your instincts. If something feels off about an interaction, trust your gut and walk away. No deal is worth the risk of being scammed.

7. Use a secure device and network. Avoid clicking suspicious links or downloading attachments on Craigslist, especially if you‘re using public Wi-Fi or an unsecured device.

What to Do If You‘re Scammed

Even the most cautious Craigslist users can fall victim to sophisticated scams. If you believe you‘ve been conned, here‘s what you should do:

1. Cut off communication with the scammer. Don‘t attempt to recover your money or possessions yourself, as this can be dangerous.

2. Report the scammer to Craigslist. Flag their post and contact Craigslist directly with details of the fraud. This can help prevent others from falling victim.

3. File a police report. While law enforcement may not be able to recover your money, having an official report can be helpful if the scammer is eventually caught.

4. Report the fraud to the Federal Trade Commission (FTC). You can file a complaint online at ftc.gov/complaint or by calling 1-877-FTC-HELP.

5. Alert your bank or credit card company. If you paid a scammer with a credit card or had a fraudulent check deposited into your bank account, alert the financial institution right away.

6. Protect your identity. If you shared personal info with a scammer, they may try to steal your identity. Consider placing a fraud alert on your credit report and investing in identity theft protection.

The Bottom Line

Craigslist scams may be common, but they are not inevitable. By knowing the warning signs, taking proactive precautions, and listening to your instincts, you can navigate the platform safely and confidently.

Remember, if a deal seems too good to be true, it probably is. No legitimate buyer will ever send you a check for more than the sale price, and no reputable seller will refuse to meet in person or pressure you to make a decision immediately.

As cybercriminals become increasingly sophisticated, it‘s more important than ever to approach Craigslist with a discerning eye. But with the right knowledge and a healthy dose of skepticism, you can harness the power of this online marketplace without falling prey to scammers.

Stay safe out there, and happy Craigslist-ing!

[^1]: FBI Internet Crime Report 2021, https://www.ic3.gov/Media/PDF/AnnualReport/2021_IC3Report.pdf
[^2]: FBI Internet Crime Report 2020, https://www.ic3.gov/Media/PDF/AnnualReport/2020_IC3Report.pdf
[^3]: Craigslist Scams & Fraud Prevalence Study, New York University, 2018
[^4]: "Couple loses $1,500 in Craigslist overpayment scam," WEWS-TV Cleveland, 2019
[^5]: "Houston Men Sent to Prison for $5M Craigslist Scam," FBI Houston Division, 2016
[^6]: "Ransomware Spreading via Craigslist Ads," Malwarebytes Labs Blog, 2016