Fake account-verification messages: how to respond safely

You open a message expecting a question about your listing. Instead, someone says you must prove your identity or your marketplace account will be disabled. That is a reason to pause, not rush to comply.

BarterBin has encountered this pattern in a member conversation. We are sharing the lesson without publishing the sender's identity or the conversation. An ordinary marketplace message is not an official account-verification channel.

Recognize the pressure behind the message

Phishing uses apparent authority to persuade people to reveal information, follow a malicious link or send money. Watch for an unexpected deadline, a request for a password or one-time code, or instructions to sign in through a supplied link. A familiar logo, polished writing or a name containing “support” does not establish who controls the account. The Canadian Centre for Cyber Security explains these tactics in its phishing guidance.

Ask yourself whether the conversation is still about the item. A buyer asking about pickup is one thing; a buyer claiming authority over your account is another. Do not send passwords, codes, identity documents or payment details to a marketplace member to keep an account open.

Check through a route you choose

Stop replying to the suspicious request. Open a fresh browser tab and type barterbin.ca yourself, or use a bookmark you already trust. Check your account there. If you need help, find the contact details on the site rather than using a link or phone number supplied by the sender. This follows the Cyber Centre's advice to verify requests through a separate channel.

BarterBin does have genuine account rules, including a 19+ requirement and acceptance of its current terms before posting or sending messages. Those confirmations happen within the site's account flow. They do not give another member authority to demand documents in chat. Read the current Terms of Use independently if you are unsure.

Use the message report and block controls

In BarterBin, open Messages and the relevant conversation:

1. Select Report message beside the received message.
2. Choose Impersonation / fake support or the reason that best fits what happened.
3. Add a short explanation without passwords, codes or identity documents.
4. If you want to block the sender too, select the additional block checkbox before sending the report. The conversation also has a separate Block person button.

Reporting asks the team to review the message; it is not a promise of an immediate ban or response. Blocking contact is not a substitute for securing an account if information has already been shared.

If you cannot sign in or cannot use those controls, the public report and appeal page provides the support address, support@ring2revenue.ca. Include the relevant page link or ad ID, the date and what concerned you. Keep any screenshots private rather than publishing another person's details.

If you already clicked or shared something

Take action based on what happened, without assuming that every click had the same result:

• Entered a password: change the affected password through the genuine service and replace it anywhere else you reused it. Enable multi-factor authentication where that service offers it.
• Shared financial information or sent money: contact your financial institution promptly through a known contact method and explain what happened. Recovery is not guaranteed.
• Opened a suspicious attachment or download: stop interacting with it and check the device with reputable security software. For a work device, involve your IT support.

These starting steps follow Get Cyber Safe's phishing recovery guidance. If you sign in through another provider, secure that provider account too; do not look for recovery help in the suspicious conversation.

Save relevant messages, receipts and dates. For suspected fraud, follow the Canadian Anti-Fraud Centre's reporting guidance, including contacting local police and the financial institution involved. Be wary of a second approach promising to recover your money for a fee. A report to BarterBin does not replace those steps.

Give your business a simple inbox routine

For a dealership or small shop, agree in advance who handles account-security questions. Staff answering listing enquiries should know whom to notify and how to reach that person without using contact details from a suspicious message. Encourage quick reporting when someone makes a mistake; silence makes it harder to respond.

Keep this rule beside the sales inbox: discuss the listing with the buyer, but verify account-security requests independently. That applies whether you are selling equipment in Kamloops, advertising stock in Kelowna or handling enquiries elsewhere.

Prepared October 3, 2026. Canadian guidance, BarterBin's public reporting route and the live message-report form were checked on that date. No customer details or private conversation excerpts are published here.