eBay QR Code Scam: What It Is and What to Do

The two eBay QR code scams

Scammers work both sides of eBay transactions. Whether you're the buyer or the seller, the goal is the same: move the payment off-platform, where eBay's protections can't help you.

1. The off-platform discount offer (buyer scam)

You find a listing — often for electronics, sneakers, or concert tickets — and the seller messages you outside eBay (via email, WhatsApp, or another platform). They offer a discount if you pay directly, bypassing eBay checkout. They send a QR code to "complete the payment."

The QR code leads to a fake payment page or a phishing form designed to capture your card details or bank login. You pay, the item never ships, and because you never used eBay's checkout, you have no recourse through eBay's Money Back Guarantee.

2. The fake payment confirmation or shipping label (seller scam)

You're selling something. A "buyer" messages you claiming they've paid and sends a QR code as "proof of payment" — or says you need to scan it to "release" the funds or "activate" the shipping label. Some variants frame it as an overpayment requiring you to scan and refund a portion.

No payment was ever made. The QR code either leads to a phishing page designed to steal your banking credentials, or directs you to a payment flow where you end up sending money to the scammer. Ship nothing until you verify the payment landed in your account — directly through your bank, not via any link or QR code they sent.

Why eBay transactions never need a QR code

eBay's checkout handles everything — payment processing, buyer protection, and shipping label generation — entirely within the platform. At no point in a legitimate eBay transaction will you be asked to scan a QR code for any purpose.

eBay does not generate QR codes for:

• Payment confirmation or receipt
• Releasing funds held in escrow
• Identity or age verification
• Generating or activating shipping labels
• Any other step in the buyer or seller flow

Any request to "finalize" or "confirm" a deal via a QR code is an attempt to move the transaction off-platform — which is explicitly against eBay's policies and strips you of all buyer and seller protections.

The same off-platform pressure tactic appears in Craigslist QR code scams, where there's no platform protection to begin with — making eBay's built-in protections all the more valuable if you stay inside them.

What to do right now

Whether you scanned the code, entered information, or sent money, here's how to respond:

1. If you only scanned the code and didn't enter anything, you're likely fine. Check your device for any unexpected app installs, new configuration profiles (iOS: Settings → General → VPN & Device Management), or browser extensions you didn't add.
2. If you entered login credentials, change your password on that account immediately from a trusted device. Change it on any other accounts using the same password. Enable two-factor authentication on your eBay account and your email.
3. If you entered payment information, call your bank or card issuer and report the transaction as fraud. Ask whether a chargeback is possible. The faster you act — within hours — the better your odds of recovering funds.
4. If you sent money via Zelle, Venmo, or a wire transfer, contact the payment platform's fraud team immediately. These transfers are often irreversible, but reporting them promptly is still essential. See the Venmo QR code scam guide for Venmo-specific steps.
5. Report the eBay account. Go to the listing or message thread, click "Report," and select the appropriate fraud category. eBay investigates and can suspend the fraudulent account to protect others.
6. Report to the FTC at reportfraud.ftc.gov and to the FBI's Internet Crime Complaint Center at ic3.gov. Include the eBay username, listing URL, and any QR code images you have.

How to protect yourself on future eBay deals

• Scan any QR code with QRsafer first. It checks the destination URL for phishing, malware, and fraud signals before you open anything — and gives you a plain-language verdict in seconds.
• Always pay through eBay checkout. This is the only way to be covered by eBay's Money Back Guarantee. Off-platform payments — regardless of the method — void all protections.
• Verify payment in your account directly. If a buyer claims to have paid, log into your bank or eBay account directly — never via a link or QR code they sent you — and confirm the balance before shipping anything.
• Refuse any request to communicate off-platform. If a buyer or seller pushes to move the conversation to email, WhatsApp, or text, treat it as a red flag. eBay's messaging system documents everything and is your paper trail if a dispute arises.

Frequently asked questions