Facebook Marketplace scam: the listing, the chat and the payment as evidence
What a Facebook Marketplace scam leaves behind on Facebook and Messenger, in what order to save it, and how to keep the listing, the chat and the payment verifiable.
Updated on
TrueScreen certifies a Facebook Marketplace listing, the seller’s profile and the Messenger conversation while they are still online. It captures them in a controlled environment and issues a certification that carries a qualified electronic seal and a qualified timestamp, recognized internationally. The certification shows how and when the content was acquired, not who is behind the profile.
Key takeaways
- Meta says it retains no data for law enforcement unless it receives a valid preservation request before a user has deleted the content.
- If money left your account, contact your bank or payment app first; then, if it is safe, capture the listing, the profile and the Messenger chat before reporting or blocking, without opening any link the scammer sent.
- In the EU, Article 16 of the Digital Services Act provides that a notice of allegedly illegal content to a hosting service should include the exact URL, so keep the listing link visible in the evidence.
- In the EU, eIDAS gives a qualified electronic seal a presumption of the integrity and correct origin of the data (Art. 35(2)) and a qualified electronic time stamp a presumption of the accuracy of its date and time (Art. 41(2)); the weight of the evidence is for the court to decide.
- A TrueScreen certification documents how and when content was acquired; it does not identify the person behind a profile or recover money.
$2.1 billion
reported to the FTC in 2025 as lost to scams that started on social media
nearly 30%
of people who reported losing money to a scam to the FTC said it started on social media (2025)
56,478
non-payment or non-delivery complaints received by the FBI IC3 in 2025, across all channels (complaints received, not a measure of prevalence)
A deposit sent through Zelle for a couch at half price, then silence. Or, as a seller, a “payment confirmation” with a link to collect the money. Either way, the evidence sits on Facebook: a listing that can be deleted, a profile that can vanish, a Messenger chat. Meta’s law enforcement guidelines say it retains no data for law enforcement unless it receives a valid preservation request before a user has deleted the content.
This insight is part of our guide: Facebook defamation, deleted posts and how to capture them as evidence
How Facebook Marketplace scams work
A Facebook Marketplace scam moves the payment, or your account details, off Facebook, then removes what ties it to the profile. According to the FTC, people reported losing $2.1 billion in 2025 to scams that started on social media, with more lost to scams starting on Facebook than on any other platform.
Fake listings, fake buyers and payment links on Facebook Marketplace
As in other marketplace scams, the fake seller offers an item slightly too cheap, pushes for speed and asks for a deposit by Zelle or bank transfer. In 2025 the FBI’s IC3 received 56,478 non-payment or non-delivery complaints across all channels (IC3 report), a count of complaints rather than a measure of how common these scams are. A Facebook Marketplace buyer scam works the other way: a doctored payment screenshot or email, a request to refund an overpayment, a verification code “to confirm you’re real,” or a link to a phony shipping or payment page.
How the law describes a Facebook Marketplace scam in the EU and internationally
Many legal systems treat deceiving someone into handing over money as fraud. Internationally, the Council of Europe’s Budapest Convention on Cybercrime asks its parties to establish computer-related fraud as a criminal offense (Article 8). In the EU, Article 16 of the Digital Services Act provides that a notice of allegedly illegal content to a hosting service should include the exact URL. Which offense fits depends on national law, and some offenses have short deadlines for filing a complaint, so speak to a lawyer or the authorities early. You can report a scam even with little evidence; verifiable evidence makes it easier to assess.
The Facebook Marketplace evidence to keep before the seller disappears
The listing, the profile and the Messenger chat can be deleted at any time, while your bank keeps its own payment record, so the Facebook side comes first. If you were scammed on Facebook Marketplace:
- If money left your account or you shared card details, contact your bank or payment app now.
- If the listing, profile and chat are still visible and you can do it safely, capture them before you report or block. If the messages threaten or exhaust you, protect yourself first: what you already saved stays useful.
- Keep the payment record and every link or “receipt” you were sent, without opening them.
- Do not send more money, codes or personal details, even if the other person offers to “fix” the problem, and do not meet them in person.
- Then, as Meta advises, stop replying and report the suspected scam; block them if it is safe, and go to the police.
| Evidence | What it must show | How to capture it |
|---|---|---|
| Marketplace listing | URL, item, price, photos, when it was posted | Forensic Browser or Browser Extension; TrueScreen App (Web Browsing Acquisition) on a phone |
| Seller’s Facebook profile | URL, name, “Joined Facebook” year, other listings | Same session, opened from the listing |
| Messenger conversation | Whole thread, sender’s profile, dates, payment agreed, any link received (left unopened) | TrueScreen App screen recording; Forensic Browser on Messenger web |
| Payment | Amount, date, recipient, transaction ID | Payment app screen recording, or receipt certified as a file (date fixed from certification) |
The Facebook Marketplace listing and the seller’s profile
The listing URL identifies it in a police report or a notice to Facebook, so capture it with price, photos and the seller’s profile, including the “Joined Facebook” year if the profile shows it. As with deleted Facebook posts, a listing is documented best while online through web page certification; once removed it can no longer be captured and certified, though other elements can still help.
The Messenger conversation
A verifiable capture shows the whole thread, with the sender’s profile visible and the date fixed by a qualified timestamp, as in a certified Messenger conversation. Marketplace chats may have their own section in Messenger, and strangers’ messages can land in message requests, so check both.
The payment agreed on Messenger
Keep the messages where the payment was agreed (a Facebook Marketplace Zelle scam often starts with “Zelle me the deposit”) and the transaction details from your bank or app. Certifying a payment screenshot you already have as a file fixes its content and date from the moment it is certified; it does not show when or how the screenshot was made.
How TrueScreen certifies the Facebook Marketplace listing and the Messenger conversation
TrueScreen, the Data Authenticity Platform, certifies the listing, the profile and the Messenger conversation at the source, in a controlled environment where they cannot be altered. The certification documents how and when the content was acquired; it doesn’t identify the person behind the profile or recover money.
Consider a scam aimed at a seller: the “buyer” sends a Messenger link to “release” a payment. The seller does not open it. They record the chat in the TrueScreen App, with the link visible, and only then, if it is safe, report the profile. A link sent by a scammer can expose your device and accounts, so leave it to the police or your lawyer.
-
Capture the Facebook Marketplace listing and the seller’s profile
On a computer, the Forensic Browser fits when the other side may challenge how the page was acquired; its full recording mode records video and audio of the whole session. For speed, the Browser Extension captures the full page in Chrome or Edge. On a phone, use Web Browsing Acquisition in the TrueScreen App. If the listing appears only after the Login, do the Login inside the session (full recording in the Forensic Browser or Web Browsing Acquisition in the TrueScreen App), without showing passwords or codes.
-
Record the Messenger conversation where you read it
On a phone, start a screen recording in the TrueScreen App and scroll the Marketplace chat from the first message, with audio when the device and permissions allow. On a computer, open Messenger on the web in the Forensic Browser in full recording mode, with the Login inside the session.
-
Certify the payment agreed on Messenger and share the package
Before recording the payment app, close unrelated screens: the recording shows everything, including balances, other transactions and other people’s names. Keep passwords, PINs and codes out of view. Protected screens show up black in the recording; in that case, certify the receipt as a file in the App or the Portal. Emails you received, such as a fake receipt, can be forwarded to your workspace’s Mail Certification address without clicking links or opening attachments; certification runs from the moment TrueScreen receives them. Each package, with its SHA-256 hashes, stays in the workspace archive and can be verified independently of TrueScreen, for example on the public verifier. Share it with your lawyer or the police and keep it off social media.
Conclusion
A Facebook Marketplace scam is easiest to document in the hours when the listing, the seller’s profile and the Messenger chat are still online. Call your bank first if money has left your account; then, if you can do it safely, capture what is still visible before reporting or blocking. A certification records how and when that content was acquired, and the weight it carries is assessed by the authorities and the court in each case. A lawyer can tell you which steps fit your situation.
FAQ on Facebook Marketplace scam evidence
Should I report a Facebook Marketplace scammer before or after saving the evidence?
Save it first if the listing and chat are still visible and you can do it safely, since a report can get the page removed. If money is involved, call your bank or payment app before anything else.
Is a screenshot of a Messenger chat enough as evidence?
A plain screenshot doesn’t show which profile sent the messages, when, or whether the thread is complete. In the EU, the eIDAS Regulation gives a qualified electronic seal a presumption of the integrity of the data and of the correctness of its origin (Article 35(2)), and a qualified electronic time stamp a presumption of the accuracy of the date and time and of the integrity of the data bound to them (Article 41(2)). A TrueScreen certification of a Messenger chat carries both; how much weight it carries is for the court to decide.
Can I get my money back after a Facebook Marketplace scam?
Nothing guarantees a refund, and TrueScreen does not recover money. Ask your bank or payment provider, with the transaction ID at hand.
Sources and verification
Every figure and principle cited here links to its source, listed with type and date. Links checked on the publication date.
| Source | Type | Date | What it supports |
|---|---|---|---|
| Meta, Information for law enforcement authorities | Document | accessed 27/10/2026 | No data retained for law enforcement without a preservation request made before the user deletes the content |
| Meta, Marketplace trust and safety | Document | accessed 27/10/2026 | Meta’s advice to stop communicating with the buyer or seller and report suspected scams |
| FTC Data Spotlight: reported losses to scams on social media | Survey | 27/04/2026 | Reported losses to scams that started on social media and on Facebook in 2025 |
| FBI IC3 Internet Crime Report 2025 | Survey | 2026 | Non-payment and non-delivery complaints in 2025 |
| Budapest Convention on Cybercrime (ETS 185), Art. 8 | Law | 2001 | Computer-related fraud as a criminal offense |
| Regulation (EU) 2022/2065 (Digital Services Act), Art. 16 | Law | 19/10/2022 | Notice mechanisms and the exact URL of the content |
| Regulation (EU) 910/2014 (eIDAS), Art. 35(2) | Law | consolidated 18/10/2024 | Presumption of integrity and origin for a qualified electronic seal |
| Regulation (EU) 910/2014 (eIDAS), Art. 41(2) | Law | consolidated 18/10/2024 | Presumption of accurate date and time for a qualified timestamp |
Certify the listing and the chat while they are online
If the listing and the chat are still visible and it is safe to do so, TrueScreen captures them with a forensic method and issues a certification with a qualified electronic seal and a qualified timestamp, verifiable by third parties.
TrueScreen editorial team
This section is edited by the TrueScreen editorial team, which brings together expertise in digital forensics, the law of digital evidence and regulatory compliance. Every article is checked against primary sources: legislation, published rulings, technical standards and official documentation, always cited in the text.
