Facebook Marketplace and Gumtree Scams in Australia 2026: Buy and Sell Safely

Facebook Marketplace and Gumtree are how most people in Australia furnish a home, shift a couch or pick up a cheap car. They are also where a very large amount of money quietly disappears. In the first three months of 2026 alone, Australians reported losing $76.7 million to scams, and $38.3 million of that started with online contact — roughly half of all reported losses.

The most important thing to understand is that the biggest scam in Australia right now targets sellers, not buyers. If you have listed something and a buyer immediately agrees to your price and wants to use PayID, you are most likely being scammed. This guide starts there, because it is the one that catches people who think they are being careful.

The PayID scam, step by step

This is the dominant Marketplace scam in Australia and it is worth walking through properly, because it is well built. Every step is designed to feel normal.

1. You list an item. Within minutes, a buyer messages. They love it, they agree to your asking price without haggling, and they are keen to lock it in. (Nobody on Marketplace agrees to the asking price without haggling. This is the first tell.)
2. They suggest PayID. It sounds safe and modern, and it is a legitimate Australian system, which is exactly why it works as bait.
3. They cannot collect personally. A brother, a partner, a friend or a courier will pick it up. This removes the face-to-face moment where the scam would collapse.
4. An email arrives that looks like PayID. It says something like: you have received A$850, but because this is a business transaction the funds cannot be released to a personal account. To receive it, upgrade to a PayID Business Account by transferring a one-time fee.
5. The fee is small and specific. Usually $50 to $200, to a BSB and account number in the email. It is small enough to feel like an annoying admin charge rather than a theft, and it is dressed up as your money being released.
6. You pay it. Now a second email arrives: the upgrade did not go through, or the amount was wrong, or a further refundable deposit is needed. The story continues for as long as you keep paying.

There was never any money. The BSB belongs to the scammer, the email came from them, and the “$850” existed only as text on a screen. Because you sent the fee yourself through your own banking app, most of the usual protections do not apply.

Why it works on careful people

The scam does not ask you to hand over your bank details or click a dodgy link. It asks you to make a normal transfer — something you do every week. It also inverts the usual instinct: you are not paying for something, you are (as you understand it) unlocking money you have already been paid. That framing is what gets people who would never fall for a phishing link.

The 2026 courier and QR code wave

The newer variant, which police and Australia Post both warned about in April 2026, drops PayID for postage. A “buyer” says they will arrange a courier, then sends you a link or a QR code to confirm the pickup or to receive the shipping payment. The link goes to a convincing fake — often mimicking Australia Post — and harvests your card or online banking details.

The tell is the same as always: a legitimate buyer collecting an item does not need you to click anything. They turn up, they look at the couch, they pay you, they take the couch. Any process that involves you scanning a code or entering bank details on a website to complete a local sale is a scam.

Every scam you will meet, by who it targets

Most guides lump these together. It is more useful to split them, because the defences are completely different depending on which side of the transaction you are on.

If you are SELLING

If you are BUYING

Why Australian payments make this worse

Australia moved to near-instant bank transfers through the New Payments Platform, which PayID and Osko sit on top of. It is genuinely excellent infrastructure, and it has one consequence that scammers exploit relentlessly: an Osko or PayID transfer lands in seconds and is, in practice, gone.

Unlike a credit card payment, there is no chargeback mechanism. Your bank can request the money back from the receiving bank under the mistaken-payment rules, but if the scammer has already moved it — and they will have, usually within minutes — there is nothing to recall. This is why “just do a bank transfer” is the most dangerous sentence on Marketplace.

I have been scammed. What now?

Move fast — the first hour matters more than everything else. Work down this list in order, and do not stop at step one because you feel embarrassed. Scam victims in Australia are overwhelmingly ordinary, careful people, and reporting is what gets accounts frozen before the next person is hit.

1. Ring your bank immediately. Do not email — ring, and use the number on your card or in your banking app, not one from any message. Ask them to attempt a recall of the payment and to flag the receiving account. Australian banks have a mistaken-payment process, and speed is the only variable you control.
2. If you gave card details, cancel the card in the app straight away rather than waiting to speak to someone.
3. If you shared a verification code, ID document or password, treat it as identity theft rather than a lost sale — go to step 5.
4. Report to Scamwatch at scamwatch.gov.au. This feeds the National Anti-Scam Centre, which took down 5,834 scam websites in the first quarter of 2026 alone. It will not get your money back directly, but it is how the pattern gets identified.
5. Contact IDCARE on 1800 595 160 if any personal information was exposed. It is a free, government-funded national identity and cyber support service, and they will build you a specific response plan. This is the step people skip and later wish they had not.
6. Report to police via ReportCyber at cyber.gov.au. You will get a reference number, which some banks and insurers ask for.
7. Report the account to the platform — Facebook or Gumtree — so the profile can be pulled down.
8. Keep everything. Screenshots of the listing, the whole message thread, the fake emails with full headers, and your payment receipts. Do not delete the conversation in frustration; it is your evidence.

Note what that chart says: about half of all reported scam losses in Australia now begin with online contact — fake websites, ads, social media and apps. Marketplace and Gumtree sit squarely inside that half.

New to Australia? You are a specific target

Scammers select for people who are new, and international students and recent arrivals fit every criterion: furnishing a whole home at once, on a budget, unfamiliar with local payment norms, often reluctant to involve police, and sometimes worried that a complaint could affect a visa. None of that reluctance is warranted, and all of it is exploited.

• You will not have a visa problem for reporting a scam. Scamwatch, IDCARE and ReportCyber are consumer-protection and police services, not immigration enforcement. Being a victim of a crime is not a visa issue.
• Learn what normal looks like before you transact. In Australia, private second-hand sales are overwhelmingly cash on pickup. A seller or buyer steering you away from that is the anomaly, not you for suggesting it.
• Rental scams are the most damaging. Never pay a bond or rent for a property you have not physically inspected, no matter how plausible the story about the landlord being overseas. A legitimate Australian rental goes through an agent or an inspection, and bond is lodged with the state bond authority — never paid straight to a person.
• Use free interpreter services if you need them. Scamwatch, IDCARE and the police all provide them. Handling a dispute in your second language under stress is unnecessary.
• Be wary of community-group sales that skip the platform. Buying through a WhatsApp or WeChat group from someone who “knows a friend” removes every protection the platform offers, and shared nationality is not a credential.

Marketplace scams: frequently asked questions

Where to report, and where to get help

Where to go next

If you are buying a car through Marketplace or Gumtree, work through our used car buying checklist before you hand over money, and check what it will cost to put on the road in our registration and stamp duty guide. If you are selling regularly rather than clearing out a cupboard, our side hustles in Australia guide covers when that becomes a business in the eyes of the ATO. For the wider picture, see the cost of living in Australia price guide.