SpySeller

Why did I get a fake Etsy sale email after creating a new listing?

AAnonymous
1 answer

I run an Etsy shop and I created a new listing. About 10 minutes later, I received an email claiming I made a sale, but I didn’t get the usual Etsy notification and there’s no new order showing in my Etsy dashboard.

The message doesn’t appear to be from an official Etsy email address, and it includes a hidden button/link that redirects to another website. How can I confirm whether this is a phishing attempt, and what steps should I take to protect my Etsy account if I clicked anything?

Answers

Hi! That almost certainly sounds like a phishing email—if there’s no new order in your Etsy Shop Manager (or on the Etsy Seller app) and you didn’t get the normal Etsy in-app notification, you didn’t actually make a sale, even if an email claims you did.

To confirm it’s phishing (quick checks)

  • Trust your Etsy dashboard, not the email. Open Etsy by typing the site into your browser/app (don’t use the email), then check Shop Manager → Orders & Shipping. No order there = no sale.
  • Check the sender and “mailed-by” details. Fake emails often use look‑alike addresses/domains or don’t match what the display name says.
  • Hover/press-and-hold the button or link (don’t click) and look at the real destination. If it goes anywhere other than an Etsy-owned domain, it’s suspicious.
  • Look for urgency + login prompts. “Confirm your sale,” “release funds,” “verify account,” “you’ll be suspended,” etc. are classic phishing patterns—especially when they include a hidden/shortened link.

If you clicked the link (what to do next)

  1. If you did NOT enter your Etsy password anywhere:

    • Close the page/tab.
    • Change your Etsy password anyway (directly in Etsy settings, not via the email).
    • Turn on two-factor authentication (2FA) if it isn’t already.
    • Review your account for anything changed: email address, bank/deposit info, credit card, shipping addresses, and any new “authorized apps.”
  2. If you DID enter your Etsy login details (or you’re not sure):

    • Change your password immediately (and change it anywhere else you reused that password).
    • Enable 2FA right away.
    • Sign out of other sessions/devices (Etsy has a way to manage active sessions/logins in security settings).
    • Check for damage: any new listings, changed prices, new payout/bank details, unusual messages sent to buyers, or Etsy Ads turned on unexpectedly.
    • If anything looks off, contact Etsy Support from inside your Etsy account and tell them you may have entered credentials on a phishing site.
  3. If you downloaded anything or the site asked to “install” a file/extension:

    • Run a full antivirus/malware scan on your computer/phone.
    • Remove any suspicious browser extensions you don’t recognize.
    • Consider changing passwords again after the device is clean (on a different, trusted device).

Protect yourself going forward (simple habits that help a lot)

  • Don’t click “sale/order” buttons in emails—always check orders in Shop Manager.
  • Keep 2FA on, use a unique password, and consider a password manager.
  • Treat any email about “payment release,” “verification,” “copyright,” or “urgent suspension” as suspicious unless it’s also reflected inside Etsy when you log in normally.

If you tell me whether you entered your password or only clicked the link, I can give you a tighter checklist for your exact situation.

Related questions

Explore more

Related posts

Keep reading