MARKETPLACE SCAMS · ANATOMY OF A CONJune 15, 20269 min read

The buyer says they've already paid and sends a screenshot to prove it. This is the fake-payment scam — where the proof is the lie.

If you've ever sold something online, you know the moment: a keen buyer, a quick "I just sent it ✅", a screenshot of the payment — and a polite push to ship today. It feels rude to doubt them. That feeling is the whole scam. Here is exactly what that exchange looks like, and the one rule that makes it harmless.

$2.09B
Lost via bank transfer & payment apps in 2024 — the top-loss method (FTC)
#2
Online shopping — 2nd-most-reported fraud of 2024 (FTC)
Seconds
How long it takes to fake a payment screenshot
$0
What an unverified screenshot is worth as proof
The short answer

A fake-payment scam targets sellers. A "buyer" claims they've already paid and sends proof — a screenshot of a payment app, a forwarded "receipt" email, a confirmation number. The proof is fabricated: because they control the image, every detail can be invented. They then rush you to ship the item or refund an "overpayment" before the money has actually arrived. The single rule that defeats every version: a screenshot is not money. Only your own bank or payment app can tell you whether you've truly been paid — so verify there, and never ship or refund a cent until cleared funds are sitting in your account. Below is a recreated example of the exchange, then a beat-by-beat decode of why it works.

Short on time? Jump to what the scam is, the exchange decoded, or what to do now.

If you, or someone you know, is selling something online right now, look at the picture below before the next "I already paid" message arrives. The scam doesn't rely on a clever fake — it relies on the small social discomfort of asking a friendly stranger to wait while you check. Once you've seen the shape of it, that discomfort disappears.

Recreated example of a fake-payment marketplace scam on an iPhone: a buyer texts 'just sent the full $740 for the iPhone on Zelle' and attaches a fake Zelle payment-sent screenshot showing $740.00 marked Pending with a confirmation number, then says a driver will collect it and asks the seller to ship today because they're traveling. When the seller replies they don't see anything in their account, the buyer says it's 'pending, banks take a few hours.' Four manipulation levers are decoded beside it.
What the fake-payment scam looks like, recreated. The screenshot is the bait; the rush to ship is the trap; 'it's pending' is the stall. Example only, not a real conversation — no real number or account.

What the fake-payment scam is

Most scam advice is written for buyers — how not to get cheated when you pay. This one runs the other way. According to the US Federal Trade Commission, people selling online are routinely targeted with fake payment notices, fake check overpayments, and bogus "verification" tricks, all built to make a seller part with goods or money before a real payment exists. The con works because the seller is the one being reassured: the buyer is eager, the "proof" looks right, and questioning it feels paranoid.

The money matters here. The FTC's 2024 data show that bank transfers and payment apps were the single costliest way people lost money to fraud — $2.09 billion, more than any other method — and online shopping was the second-most-reported type of fraud overall. Fake-payment scams sit right in that overlap: they push you toward exactly the fast, hard-to-reverse rails (Zelle, bank transfer, "friends and family") where a loss is hardest to undo.

The one rule that beats every version: a screenshot, an email, or a confirmation number is not proof of payment — your own account is. Until you have opened your own bank or payment app and seen cleared funds, you have not been paid, no matter how convincing the picture or how nice the buyer. Never ship, hand over, or refund anything before then.

How to spot it: the tells

The fake-payment scam comes in a few flavours, but the fingerprints are consistent:

The proof is an image they sent you. A screenshot, a forwarded 'receipt', a confirmation number — anything except money you can see in your own account. They control the proof; you control your bank.
A push to ship before you've checked. 'Can you send it today?', 'my driver is on the way', 'I'm traveling tonight' — urgency designed to move the goods before the payment is verified.
The 'it's pending' excuse. When you say the money isn't there, you're told it's 'processing' or 'pending for a few hours.' Real transfers arrive or they don't; this line just buys time.
An overpayment and a refund request. The buyer 'accidentally' pays too much and asks you to send the difference back — you refund real money against a payment that was never real.
A demand to pay to get paid. 'Your account must be upgraded to business to receive this' — you're told to send money to 'release' the payment. No real payment ever works this way.

Anatomy of the exchange — decoded beat by beat

The fake-payment scam is a short, social sequence, each step leaning on politeness and momentum. Naming the move at each stage is what frees you to do the one thing that ends it — check your own account.

1The eager buyer and the instant 'proof'
“Just sent the full $740 for the iPhone on Zelle ✅” — followed by a screenshot of a payment confirmation.
The lever — Social proof + the authority of an official-looking image. A confident claim plus a screenshot that mimics a real app feels like settled fact. The image carries borrowed authority — logo, amount, a confirmation number — and most people read it as a receipt rather than as a picture a stranger made. The eagerness flatters: a fast, full-price buyer is exactly who you hoped for.
The counter — An image is a claim, not a receipt. Anyone can produce a perfect-looking 'payment sent' screen in seconds. The only receipt that counts is the one inside your own account.
2The rush to ship
“My driver will collect it — can you ship today? I'm traveling tonight 🙏”
The lever — Manufactured urgency + politeness pressure. A deadline you didn't set — a courier already coming, a trip tonight — pushes you to act before you pause to verify. It also weaponises courtesy: making an eager, apologetic buyer wait feels rude, and that small social friction is exactly what the scam needs you to avoid.
The counter — Real buyers can wait an hour for a payment to clear. Any pressure to release the item before the money lands is the scam announcing itself.
3The 'it's pending' stall
“It's pending, banks take a few hrs. I already paid — please don't hold it up.”
The lever — Plausible delay + reframing your caution as the problem. When you notice the money isn't there, 'pending' supplies a reasonable-sounding reason to proceed anyway — and quietly flips the script so that your sensible caution becomes you 'holding things up.' It buys the scammer the only thing they need: the window between your trust and your verification.
The counter — A payment is either in your account or it isn't. 'Pending for hours' is not how received transfers behave — it's how a stall behaves. Wait for cleared funds, full stop.
4The twist: overpayment, or 'upgrade to receive'
“Oops, I sent $1,200 by mistake — can you send the $460 back?” or “Your account needs a business upgrade to release the funds — send $200 and I'll refund it.”
The lever — Reciprocity + paying to get paid. Both twists turn the scam profitable in cash, not just goods. The overpayment exploits fairness — they 'overpaid', so refunding 'their' money feels only right. The 'upgrade' exploits hope — a held payment you can free by sending a little first. In both, the money you send is real and the payment you're chasing never existed.
The counter — No real payment ever requires you to send money to receive it, and you never refund an 'overpayment' before the original has truly cleared. Either ask is the scam, outright.
Then comes the second loss — or the second scam. A payment that "arrives" can still be clawed back later if it was funded by a stolen account or a bad check, leaving you minus the item and the money. And people who lose money this way are often contacted again by a fake "recovery" service promising to get it back for a fee — itself a recovery scam. No genuine service charges an upfront fee to recover scammed money.

What to do

1Make the screenshot irrelevant: open your own bank or payment app and confirm cleared funds are actually there. If they aren't, you haven't been paid — wait, no matter what the buyer says. Unsure about a message or a "receipt"? Run it through the Scam Checker first.
2Refuse the rush. A real buyer can wait an hour for a transfer to clear; never ship, hand over, or refund because someone is "traveling" or sending a "driver."
3Never pay to get paid, and never refund an "overpayment" until the full original payment has cleared. Any message that needs money from you to "release" or "upgrade" a payment is a scam — stop there.
4Already shipped or refunded? Move fast — contact your bank or payment provider and your courier immediately, then report it to the platform and to the FTC at ReportFraud.ftc.gov. Our 72-hour recovery playbook and where-to-report guide have the steps.
5Prefer payment methods you can verify and that offer some protection, and learn the platform-specific tricks in our guides to Zelle and Zelle refunds.
From the field. The fake-payment scam barely qualifies as a hack — it's a manners exploit. There's no malware and no clever forgery you're meant to fall for; there's an eager buyer, an official-looking picture, and the quiet social cost of asking them to wait. Careful, honest people get caught precisely because they're honest: they extend the trust they'd want extended to them. You don't beat this by becoming suspicious of everyone. You beat it with one boring habit that owes the buyer nothing — money isn't real until it's cleared in your own account, and until then, the item stays exactly where it is.

A buyer sent "proof" and you're not sure? Send it to us first.

Paste the messages, the screenshot, the listing. A real expert reviews every case and replies within 24 hours. Free, confidential, no pressure — before you ship a thing.

Submit a free case review →Is Zelle safe to use?

Common questions about fake-payment scams

What is a fake payment screenshot scam?

It's a scam that targets people selling things online — on Facebook Marketplace, Craigslist, OfferUp, Depop, or anywhere a stranger pays you. The 'buyer' claims they've already paid and sends 'proof': a screenshot of a payment-app confirmation, a forwarded 'receipt' email, or a transaction number. The proof is fake. Because they control the image, the amount, logo, timestamp and confirmation number can all be invented in seconds. They then pressure you to ship the item or hand it to a 'driver' before you've checked your own account — and the money never actually arrives. The defence is one rule: a screenshot is not money. Only your own bank or payment app can tell you whether a payment is real.

How can I tell if a payment screenshot is fake?

You can't reliably tell by looking — and that's the point. A convincing fake screenshot copies the real app's layout, colours, logo and fonts, and adds a plausible amount, date and confirmation number. Doctored images sometimes show small tells (a misaligned logo, an odd font, a status stuck on 'pending'), but you should never rely on spotting them. The only safe test ignores the screenshot entirely: open your own banking app or your own Zelle / Cash App / PayPal / Venmo account and confirm the money has actually landed and cleared. If it isn't there, it wasn't paid — no matter how real the picture looks.

What is the Zelle 'business account upgrade' scam?

It's a common variant. The 'buyer' sends a fake email or screenshot claiming they tried to pay you, but the payment is 'on hold' because your account is only personal and the amount requires a 'business' or 'merchant' account. To 'upgrade' and release the funds, you're told to send a sum of money yourself — which the scammer promises to refund along with your payment. There is no upgrade and no held payment. Zelle does not work this way: real money either arrives in your account or it doesn't, and no genuine payment is ever released by you sending money first. Any message that requires you to pay to receive a payment is a scam.

What is the overpayment scam?

The buyer 'accidentally' pays more than the agreed price — and shows you a screenshot or email to prove the larger amount went through — then asks you to refund the difference. You send the refund from real money in your account; later, the original 'payment' turns out to be fake, reversed, or never deposited. You're left out of pocket for the refund you sent and, often, the item too. The rule is the same: never refund any 'overpayment' until the full original payment has truly cleared in your own account, and be deeply suspicious of any buyer who overpays and then needs money back.

I already shipped the item or sent a refund — what should I do?

Act fast. Contact your bank or payment provider immediately and report it as fraud — the sooner you flag it, the better the chance of stopping or reversing a transfer. If you shipped through a courier, call them right away to try to halt or reroute the parcel before it's collected. Report the scam to the platform where you listed the item, and to the FTC at ReportFraud.ftc.gov (or your country's consumer agency). Keep everything — the messages, the fake screenshot, the listing, the shipping receipt — as evidence. And be wary of anyone who then contacts you promising to recover your loss for a fee; that is a second scam aimed at people who have just lost money.

Sources & further reading

Claims in this piece are attributed to these sources. Click any of them to verify.

FTC — Selling online? Here's how to avoid getting scammedFTC — Mobile payment apps: how to avoid a scamFTC — Reported fraud losses jumped to $12.5B in 2024 (Mar 2025)Zelle — How to avoid an online marketplace scam

Keep reading