Etsy QR Code Scam: What It Is and What to Do

The three Etsy QR code scams

Scammers approach Etsy from all angles — as fake buyers, fake sellers, and as fake Etsy Support. Each variant has the same goal: move you off-platform so Etsy's protections can't help you.

1. Fake Etsy Support QR codes

You receive a message — often formatted to look like an official Etsy email or an in-platform message — claiming your account has been flagged, a payment is on hold, or your shop needs verification. The message includes a QR code and instructs you to scan it to "resolve the issue" or "confirm your identity."

The QR code leads to a convincing fake Etsy login page. You enter your credentials and the attacker now has full access to your seller account — including any linked payment methods, your shop's revenue, and your customers' order history. Etsy's real Trust & Safety team will never contact you with a QR code.

2. The off-platform payment trick (buyer and seller scam)

A "buyer" messages a seller — sometimes through Etsy's messaging system, sometimes via email after finding the shop — and offers to purchase a large order at a discount if payment is made directly via a QR code. They claim it's faster, cheaper, or that Etsy's system is having issues.

The QR code routes to a fake payment page or a personal payment app under the scammer's control. The seller ships nothing or ships the item, receives no real payment, and has no recourse because the transaction happened outside Etsy's platform — which voids all seller protections.

The same off-platform pressure tactic is used in fake invoice QR code scams targeting small businesses — the playbook is nearly identical.

3. The fake "discount checkout" scam (buyer scam)

A seller — or someone posing as one — messages a buyer claiming they can offer the item cheaper via a QR code that bypasses "Etsy's fees." The QR leads to a fake checkout page that captures the buyer's credit card number. The item is never shipped and Etsy's buyer protection doesn't apply because the purchase was made outside the platform.

Why Etsy never uses QR codes in transactions

Etsy's entire payment and communication system is designed to keep transactions inside the platform. At no point in a legitimate Etsy interaction will Etsy, a buyer, or a seller send you a QR code for any of the following purposes:

• Verifying your account or identity
• Resolving a payment hold or dispute
• Processing a payment or checkout
• Confirming a shipping address
• Generating or activating a shipping label
• Any account security or two-factor step

If a QR code leads anywhere other than a verified etsy.com URL, it is not Etsy. The same principle applies across all major marketplaces — as detailed in the eBay QR code scam guide, legitimate platform transactions simply don't work this way.

What to do right now

Whether you scanned the code, entered credentials, or made a payment, here's how to respond:

1. If you only scanned and didn't enter anything, you're likely fine. Check your device for any unexpected app installs or new browser extensions. On iOS, go to Settings → General → VPN & Device Management and look for any profile you didn't install.
2. If you entered your Etsy login credentials, go directly to etsy.com immediately and change your password. Change it on any other accounts that share the same password. Enable two-step verification on your Etsy account and on the email address linked to it.
3. If you entered payment card details, call your bank or card issuer and report the transaction as fraud. Request a new card number. The faster you act — ideally within the hour — the better your odds of blocking or reversing a charge.
4. If money was sent via a payment app, contact that platform's fraud team immediately. Most peer-to-peer payments are irreversible, but an immediate report improves your options and creates a paper trail.
5. Report the Etsy user. Go to the conversation or listing and use Etsy's "Report" option. Etsy's Trust & Safety team investigates and can suspend the fraudulent account to protect other buyers and sellers.
6. File a report with the FTC at reportfraud.ftc.gov and with the FBI's Internet Crime Complaint Center at ic3.gov. Include any screenshots, usernames, and QR code images you have.

How to stay safe on Etsy going forward

• Scan any QR code with QRsafer first. It previews the destination URL and checks it against threat intelligence databases before you open anything — and returns a plain-language verdict in seconds.
• Keep all transactions inside Etsy. Any request to pay outside the platform — regardless of the promised discount — voids Etsy's buyer and seller protections entirely. No legitimate deal requires a workaround.
• Verify the URL manually if you're unsure. Real Etsy pages always have a URL that begins with https://www.etsy.com. No hyphens, no subdomains from other domains, no alternate spellings.
• Enable two-step verification. Even if a scammer captures your Etsy password, two-step verification blocks them from logging in without access to your phone or authenticator app.

Frequently asked questions