It always sounds so reasonable. You list a couch or a phone, a buyer messages fast, and then comes the twist: “I’ve been scammed before, so I’m going to send you a code just to make sure you’re a real person.” A code lands on your phone, they ask you to read it back, and you think, why not. That single, friendly-sounding step is the entire scam, and depending on the version, it can cost you your phone number, your online accounts, or the money you thought you were making.
Every marketplace pickup code scam runs on the same trick: getting you to share a verification code that is actually meant to protect one of your accounts. Whether it is the notorious Google Voice scam or a fake payment “confirmation code,” the code is never really about proving you are real. Here are thirteen versions to recognize on Facebook Marketplace, OfferUp, and Craigslist, and the one rule that defeats all of them.
The Short Answer
Never share a verification code that arrives on your phone or email, no matter the reason a buyer or seller gives. A code sent to you exists to prove you control an account or number, so reading it to a stranger hands them that access. No legitimate buyer, seller, or platform ever needs a code from you. If someone asks, stop, block, and report them, and keep the deal to in-person cash or in-app payment.
The One Rule That Beats All of These
Before the list, memorize this, because it makes every scam below fall apart: a code sent to your phone or email is proof that you control that account or number, and that is exactly why a scammer wants it. When you read it back, you are not verifying yourself to them; you are authorizing them. No real buyer needs to send you a code, no real platform verifies sellers by having you recite a code to another user, and no legitimate payment requires a code you pass along. If a code is involved and it came to you, the answer is always no.
The 13 Code Scams to Watch For
1. The Google Voice verification-code scam
The classic. A buyer says they want to confirm you are a real person and not a bot, so Google will text you a code to read back. In reality, they are creating a Google Voice account linked to your phone number, which they pulled from your listing, and the code proves to Google that they own your number. Once they have it, they use that number for more scams that trace back to you. No identity check works this way; decline immediately.
2. The password-reset code from your own account
Here the scammer already has your email or username and triggers a login or password reset on one of your real accounts, so a genuine code from your bank, email, or the marketplace lands on your phone. They ask for it under some pretext. Handing it over lets them take over that account outright. A code you did not request appearing right as someone asks for one is a screaming red flag.
3. The fake “seller verification badge” code
The buyer claims the platform now requires sellers to be “verified” and that you will get a code to confirm your account. There is no such user-to-user verification step on legitimate marketplaces. The code is either a Google Voice grab or an account-takeover attempt dressed up as a safety feature. Real verification happens inside the app, never by reading a code to another member.
4. The Zelle “business account upgrade” code
A buyer says they paid by Zelle but you must upgrade to a business account to receive it, and sends a fake email that looks like it is from Zelle, sometimes with a code or link. You do not need to upgrade anything to receive a normal Zelle payment. The email, code, and any “proof” are forged, and the goal is to get you to pay a fake upgrade fee or click a phishing link.
5. The overpayment refund trick
Tied to the last one, the buyer claims they accidentally sent extra, or sent enough to cover an “upgrade fee,” and asks you to refund the difference, often quoting a reference code. No real money ever arrived; the payment exists only in a forged screenshot or email. Anyone who overpays and asks you to send money back is running a scam, full stop. Verify your actual balance in your banking app before moving a cent.
6. The fake payment-confirmation code
You get an official-looking email or text saying payment is “pending” and will release once you enter or confirm a code. Legitimate payment services do not hold your money hostage behind a code you type from a message. The code is bait to phish your login or push you to a fake site. Check the real app; if the money is not there, it was never sent.
7. The QR code “to release your payment”
At pickup, or before it, the buyer sends a QR code and says scanning it releases or confirms the payment to you. Scanning it can open a phishing page that harvests your login or payment details, or a request that pulls money from you rather than sending it. You never need to scan a buyer’s QR code to get paid. Receiving money does not require you to scan anything they provide.
8. The prepaid shipping-label code
A remote buyer insists on shipping and sends a “prepaid label” plus a code to confirm the arrangement. The label is fake or stolen, and the code request is another account or identity grab. Local pickups should be exactly that, local and in person. When a buyer for a local listing suddenly needs to ship and verify with codes, treat the whole conversation as fraudulent.
9. The deposit or “hold” code
The buyer offers to put down a deposit to hold the item and asks you to share a code to “confirm” it. A genuine deposit shows up as money in your account; it never requires you to recite a code to the sender. This is a verification-code grab wearing the costume of a good-faith buyer. Hold an item for cash in hand, not for a code.
10. The Cash App or Venmo “verify with this code”
The buyer says they sent payment through Cash App or Venmo but the app needs you to “verify” by sharing a code that was texted to you. Those codes are your own account’s security codes, and sharing them can let the scammer into your payment account. Peer-to-peer apps do not ask the recipient to read a code to the sender to complete a payment. If you hear this, stop.
11. The fake escrow-service code
For higher-value items, a buyer proposes an “escrow service” for safety and sends a code or login for a site you have never heard of. The escrow site is fake, built to collect your details or a fee, and the code is part of the setup. If you want protection on a big sale, use a known platform’s built-in payment, not a third-party escrow a stranger picked and a code they supplied.
12. The gift-card code swap
The buyer offers to pay with gift cards and reads you the card codes, or asks you to send a code from a card, framing it as an easy digital payment. Gift-card codes are effectively cash and are a hallmark of fraud, and any codes they give are often already drained. Legitimate buyers do not pay for a used couch in gift-card numbers. Decline gift cards as payment entirely.
13. The marketplace-app account-reset code
Finally, some scammers go straight for your selling account, triggering a password reset on your Facebook or OfferUp login so a code arrives, then asking for it to “verify the sale.” With it, they take over your account, your listings, and your reputation to scam others. The marketplace never needs you to give a login code to a buyer. Any request for the code that unlocks your own account is an attempted takeover.
What to Do If You Already Shared a Code
If you handed over a code, act fast rather than panicking. If it was a Google verification code, reclaim your number through Google’s Voice recovery process and remove the number from any account you did not create. Change the password on the affected account, and any account that shares it, and turn on two-factor authentication everywhere. Watch your bank and payment apps for activity. Then report it: file with the FTC, tell the marketplace so they can act on the account, and contact your bank if money moved. Quick action limits the damage.
This is general consumer-safety information, not legal or financial advice, and scam tactics change constantly, so treat any new twist with the same caution. Verify anything suspicious independently, through the official app or a number you look up yourself, and if you have lost money or your identity may be compromised, report it to the authorities and your bank promptly. For current guidance, consult official resources like the FTC.
Frequently Asked Questions
What is a marketplace pickup code scam?
It is any scam where a buyer or seller gets you to share a verification code sent to your phone or email, usually framed as proving you are real or confirming a payment. The most common is the Google Voice scam, where the code lets them link a Google Voice number to your phone. Others use codes to take over your accounts or fake a payment. The unifying trick is that the code always actually protects something of yours.
Why does a buyer want a Google verification code?
Because it lets them create a Google Voice number tied to your phone number. They tell you the code confirms you are not a bot, but the message from Google plainly says it is a Google verification code, not a marketplace check. Once they enter it, they control a phone number linked to you and use it for further scams, and potentially to intercept your password-reset codes. Never read a Google code to anyone.
Is it ever safe to share a code a buyer sends?
No. A verification code that arrives on your device is always meant to prove you control an account or number, so sharing it only ever gives that control to someone else. There is no legitimate situation in a marketplace sale where a real buyer, seller, or platform needs a code from you. If sharing a code is part of the ask, the request is a scam, regardless of how convincing the story sounds.
How do I sell safely on Facebook Marketplace or OfferUp?
Keep it simple: meet in a public place for local sales, take cash or use the platform’s own in-app payment, and never share any code, click a buyer’s link, or scan their QR code. Verify any claimed payment inside your real banking or payment app, not from an email or screenshot. Be wary of buyers who rush, overpay, insist on shipping a local item, or ask to “verify” you. Those are the reliable warning signs.
What should I do if I gave a scammer a verification code?
Move quickly. If it was a Google code, reclaim your number through Google’s recovery process and detach it from unfamiliar accounts. Change the password on any affected account and enable two-factor authentication, then monitor your bank and payment apps. Report the scam to the FTC and the marketplace, and contact your bank if any money was involved. The faster you act, the more you can limit access before the scammer uses it.
The Bottom Line
Marketplace code scams all lean on the same misunderstanding: that a code proves you are real. It does not. It proves you control an account, which is precisely why a stranger wants you to read it aloud. From the Google Voice trick to fake payment codes and account-reset grabs, the defense is one sentence: never share a code that came to you, and never send money back to someone who overpaid. Meet in public, take cash or in-app payment, and verify everything in the real app. For more on staying safe, see our guides to fake bank text alerts and remote job offer scam signs, or browse the YouGottaRead Everything Else section.
