Marketplace Fraud Prevention: How to Stop Seller, Buyer, and Payment Fraud in 2026

According to Veriff's Identity Fraud Report 2026, e-commerce marketplaces had a net fraud rate of 19.2 percent, nearly five times the global average.

Marketplace fraud is different from ordinary online store fraud. A single-brand shop only has to worry about its buyers. A marketplace has to protect buyers from sellers, sellers from buyers, and the platform itself from both, plus the payment rails in between. Every new account on either side of the market is a potential attack surface.

This guide explains the main types of marketplace fraud, how to build marketplace fraud detection into signup, payments, and payouts, and how Greip signals help trust and safety teams stop bad actors before they cost money or reputation.

What Is Marketplace Fraud?

Marketplace fraud is any deliberate abuse of a multi-sided platform where buyers and sellers transact through a third party. It includes fake seller listings, buyer refund abuse, stolen card payments, account takeover, and coordinated rings that collude to game reviews, promotions, or payouts.

Because the platform sits in the middle of every transaction, it usually carries the financial loss: chargebacks, refunds paid from its own pocket, and lost trust that pushes honest users to competitors.

Types of Marketplace Fraud

Fake Sellers and Listing Fraud

Fraudulent sellers create listings for goods they never ship, counterfeit items, or bait products that redirect buyers off-platform. They often register many accounts with disposable emails and virtual phone numbers so that a ban on one account barely slows them down.

Buyer Fraud and Refund Abuse

Buyer fraud includes "item not received" claims on delivered orders, returning empty boxes or swapped items, and friendly fraud chargebacks. Repeat abusers rotate accounts, addresses, and devices to stay under refund limits.

Payment Fraud

Stolen cards and card testing hit marketplaces hard because purchases can be spread across many small sellers. A fraudster may also act as both buyer and seller, paying with a stolen card and withdrawing the funds as a seller payout before the chargeback lands.

Account Takeover (ATO)

Account takeover prevention for online marketplaces matters because aged, well-rated accounts are valuable. Attackers use leaked credentials to log in, change payout details on seller accounts, or spend stored balances and saved cards on buyer accounts.

Collusion and Fraud Rings

Groups of linked accounts boost each other with fake reviews, abuse referral and coupon programs, or run triangulation schemes. Spotting them requires linking accounts by shared infrastructure. Our guide on using ASN data to uncover coordinated fraud rings covers this in depth.

Marketplace Scams From the Platform's Side

Consumers search for "marketplace scams" when they get burned, but the fix belongs to the platform. The most common patterns are off-platform payment requests, fake shipping or payment confirmation emails, overpayment scams, and phishing links in chat. Platforms reduce them by keeping payments and messaging on-platform, flagging messages that contain payment handles or external links, and restricting new or high-risk accounts from messaging first.

Warning: According to the Barclays 2025 Scams Bulletin, 49 percent of scam claims originated on online or social marketplaces. If your users are being scammed, they will blame the platform, not the scammer.

Seller Verification and Signup Screening

Seller verification is the first and cheapest control. Stopping a fake seller at signup costs a fraction of handling the disputes they generate later.

Email Scoring

Syntax checks are not enough. Greip Email Scoring flags disposable domains, invalid mailboxes, and risky patterns so you can block or challenge throwaway accounts at registration.

Phone Scoring

Greip Phone Scoring goes beyond format validation. It assesses whether the number is likely valid and operational and helps detect risky and disposable numbers, which are a favorite tool of fake seller farms. See our marketplace guide to eliminating fake accounts with email and phone scoring for setup tips.

Tiered Seller Onboarding

Not every seller needs full identity documents on day one. Use risk tiers:

1. Low risk signals: allow listing with standard limits.
2. Medium risk: require phone confirmation and hold first payouts longer.
3. High risk: require document verification before any listing goes live.

Tip: Combine signals from Data Scoring and Validation into one onboarding risk score instead of blocking on any single check. This keeps false positives low for honest sellers.

Payment Screening for Marketplaces

Every order should be scored before it is captured. Greip Payment Fraud Analysis evaluates the transaction, customer, device, and address data together and returns a score, risk level, and recommendation along with the rules that fired, such as VPN usage, risky email, or high purchase velocity.

For marketplaces, also send the merchant or seller identifier with each transaction. This lets you spot buyers hammering one seller, or a seller receiving an unusual stream of risky payments, which is a classic sign of buyer and seller collusion.

IP, VPN, and ASN Signals

Network data ties accounts together even when emails and names differ.

• VPN and proxy usage: VPN and Proxy Detection reveals users hiding their real location, a common trait of account farms and card testers.
• Hosting and cloud networks: real shoppers rarely browse from data centers. Traffic from hosting ASNs at signup or checkout deserves extra scrutiny.
• ASN clustering: Network Intelligence (ASN) lets you group accounts by network and flag clusters of new sellers or reviewers appearing from the same small provider.

For a deeper look at linking phone and IP data to expose networks of fake accounts, read our playbook on unmasking sock puppet armies.

Sample: Scoring a Marketplace Order With Greip

The example below uses the Greip v2 Payment Fraud Detection endpoint. The API key goes in the Authorization header.

curl --request POST \
  --url 'https://v2.greipapi.com/score/payments' \
  --header "Authorization: Bearer $GREIP_API_KEY" \
  --header 'Content-Type: application/json' \
  --data '{
    "data": {
      "action": "purchase",
      "merchant_id": "seller_48213",
      "transaction_id": "ord_99120",
      "transaction_amount": 249.99,
      "transaction_currency": "USD",
      "customer_id": "buyer_7781",
      "customer_email": "buyer@example.com",
      "customer_phone": "+14155550123",
      "customer_ip": "203.0.113.25",
      "customer_useragent": "Mozilla/5.0",
      "customer_registration_date": 1761955200,
      "billing_country": "US",
      "shipping_country": "US"
    }
  }'

A trimmed response looks like this:

{
  "success": true,
  "data": {
    "score": 82,
    "risk_level": "high",
    "recommendation": "review",
    "rules": [
      { "id": "PF10003", "description": "Customer IP Address is probably VPN/Proxy/Bot/Hosting/Cloud." },
      { "id": "PF10004", "description": "Customer Email Address is probably invalid or spam." }
    ]
  }
}

Note: Use the recommendation to route orders: approve low risk, send review cases to your trust and safety queue, and block high risk orders before the seller ships anything.

Escrow, Payout Holds, and Payout Changes

Escrow protects buyers by holding funds until delivery is confirmed, and protects the platform from paying out on a transaction that later charges back.

• Hold payouts longer for new sellers and shorten the hold as they build history.
• Treat any change to payout bank details as a high-risk event. Require re-authentication and delay the next payout.
• Score withdrawals as well as purchases. Greip supports a withdrawal action, which helps catch ATO cash-out attempts.

Dispute Resolution That Discourages Abuse

A clear dispute process builds trust and also produces data. Track dispute outcomes per buyer, seller, device, and network. Buyers with repeated "not received" claims and sellers with repeated "not as described" claims should move into higher-risk tiers automatically. Require proof such as tracking numbers and photos, and keep all communication on-platform so evidence is available.

Marketplace Fraud Prevention Best Practices

1. Score every signup on both sides of the market, not just buyers.
2. Score every payment and every withdrawal in real time.
3. Link accounts by IP, ASN, device, email, and phone to expose rings.
4. Use risk-based payout holds and protect payout detail changes.
5. Keep payments and messaging on-platform.
6. Feed dispute and chargeback outcomes back into your rules.
7. Review rules monthly, since fraud patterns shift quickly.

Marketplace trust and safety works best as layers. No single check stops every attack, but stacked signals make fraud expensive enough that bad actors move elsewhere.

Frequently Asked Questions

What is marketplace fraud?

Marketplace fraud is abuse of a multi-sided platform by fake sellers, abusive buyers, stolen payments, account takeover, or colluding groups of accounts.

How do you prevent seller fraud on a marketplace?

Verify sellers at signup with email and phone risk scoring, check IP and VPN signals, apply tiered onboarding, and hold early payouts until the seller builds a track record.

How does marketplace fraud detection work?

It combines signals from signup, login, payments, and payouts, such as risky emails, disposable phones, VPN or hosting IPs, and purchase velocity, into risk scores that drive approve, review, or block decisions.

How can marketplaces stop buyer fraud and refund abuse?

Track refund and dispute history across linked accounts, require evidence for claims, and score orders so repeat abusers are flagged even when they open new accounts.

What is the best way to prevent account takeover on a marketplace?

Watch for logins from new networks, VPNs, or unusual locations, require re-authentication for payout or password changes, and score withdrawals before releasing funds.