OfferUp QR Code Scam: What It Is and What to Do
An OfferUp buyer or seller sent you a QR code and something feels off. Good instinct. Legitimate OfferUp transactions never require a QR code — here's exactly what's happening and what to do about it.
The two OfferUp QR code scams
Scammers work both sides of OfferUp transactions. Whether you're the buyer or the seller, the goal is the same: move the deal off-platform, where OfferUp's Buyer Guarantee and seller protections can't help you.
1. The off-platform payment or deposit (buyer scam)
You find a listing — often for electronics, furniture, or a vehicle — and the seller messages you with a QR code asking you to "pay a deposit to hold it" or complete the transaction off-app. They may claim it's faster, cheaper, or that the app is having issues.
The QR code leads to a fake payment page or phishing form designed to capture your card details or bank login. You pay, the item never materializes, and because you stepped outside OfferUp, you have no recourse through OfferUp's Buyer Guarantee.
2. The fake payment confirmation or shipping label (seller scam)
You're selling something. A "buyer" messages you claiming they've already paid and sends a QR code as "proof of payment" — or says you need to scan it to "release" the funds or "activate" the prepaid shipping label. Some variants claim an overpayment that requires you to refund the difference.
No payment was ever made. The QR code either leads to a phishing page designed to steal your banking credentials, or directs you through a payment flow where you end up sending money to the scammer. Never ship anything until you verify the payment landed in your account — directly through your bank, not via any link or QR code they sent.
Why OfferUp transactions never need a QR code
OfferUp's in-app payment system handles the entire transaction — from payment processing to purchase protection — within the app. At no point in a legitimate OfferUp transaction will you be asked to scan a QR code.
OfferUp does not generate QR codes for:
- Payment confirmation or receipt
- Releasing funds held in escrow
- Generating or activating shipping labels
- Identity or account verification
- Any other step in the buyer or seller flow
Any request to finalize a deal via a QR code is an attempt to move the transaction off-platform — which is against OfferUp's policies and strips you of all purchase protections. This same pressure tactic appears in Craigslist QR code scams and eBay QR code scams — any marketplace where scammers can contact buyers and sellers directly.
What to do right now
Whether you scanned the code, entered information, or sent money, here's how to respond:
- If you only scanned the code and didn't enter anything, you're likely fine. Check your device for any unexpected app installs, new configuration profiles (iOS: Settings → General → VPN & Device Management), or browser extensions you didn't add.
- If you entered login credentials, change your password on that account immediately from a trusted device. Update any other accounts using the same password. Enable two-factor authentication on your OfferUp account and your email.
- If you entered payment information, call your bank or card issuer and report the transaction as fraud. Ask whether a chargeback is possible. The faster you act — within hours — the better your odds of recovering funds.
- If you sent money via Zelle, Cash App, or a wire transfer, contact the payment platform's fraud team immediately. These transfers are often irreversible, but reporting them promptly is still essential.
- Report the OfferUp account. Open the message thread in the app, tap the three-dot menu, and select "Report." OfferUp investigates and can suspend the fraudulent account to protect other users.
- Report to the FTC at reportfraud.ftc.gov and to the FBI's Internet Crime Complaint Center at ic3.gov. Include the OfferUp username, listing URL, and any QR code images or screenshots you have.
How to stay safe on future OfferUp deals
- Scan any QR code with QRsafer first. It checks the destination URL for phishing, malware, and fraud signals before you open anything — and gives you a plain-language verdict in seconds.
- Always pay through OfferUp's in-app checkout. This is the only way to be covered by OfferUp's Buyer Guarantee. Off-platform payments — regardless of the method — void all protections.
- Verify payment in your account directly. If a buyer claims to have paid, log into your bank directly — never via a link or QR code they sent — and confirm the funds before handing over any item or shipping anything.
- Refuse any request to communicate or pay off-platform. If a buyer or seller pushes you to move to text, email, or another app, treat it as a red flag. OfferUp's in-app messaging documents everything and is your paper trail if a dispute arises.
Frequently asked questions
Does OfferUp ever require buyers or sellers to scan a QR code?
No. OfferUp's in-app payment system never requires you to scan a QR code at any point. All legitimate OfferUp payments flow through the app — if someone asks you to scan a QR code to pay, release funds, or confirm a shipment, it is a scam designed to move you off-platform where you lose all buyer and seller protections.
I scanned a QR code from an OfferUp buyer and entered my bank login. What do I do?
Act immediately: change your bank password from a trusted device and enable two-factor authentication, call your bank to report a potential compromise and monitor for unauthorized transactions, and report the scam to OfferUp through the in-app reporting tool. If any funds were moved, file a dispute with your bank and report to the FTC at reportfraud.ftc.gov.
How can I tell if a QR code sent by an OfferUp contact is safe?
Scan it with QRsafer before opening anything — it checks the destination URL against multiple threat intelligence sources and returns a clear Safe, Risky, or Dangerous verdict. Beyond that: a legitimate OfferUp transaction never requires scanning a QR code. If a buyer or seller insists, treat it as a scam and report the user to OfferUp.
Check any QR code before you scan
QRsafer checks the destination URL before you open it — so you know if a QR code is safe before you tap, pay, or ship anything. Free on iOS and Android.
