{"id":13154,"date":"2016-10-05T08:41:42","date_gmt":"2016-10-05T12:41:42","guid":{"rendered":"https:\/\/www.kaspersky.com\/blog\/?p=13154"},"modified":"2019-11-15T06:52:51","modified_gmt":"2019-11-15T11:52:51","slug":"facebook-marketplace","status":"publish","type":"post","link":"https:\/\/www.kaspersky.com\/blog\/facebook-marketplace\/13154\/","title":{"rendered":"Security concerns with Facebook Marketplace?"},"content":{"rendered":"<p>Earlier this week, Facebook introduced <a href=\"http:\/\/newsroom.fb.com\/news\/2016\/10\/introducing-marketplace-buy-and-sell-with-your-local-community\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">Marketplace<\/a>, a service that helps users discover, buy, and sell items locally. Think of it as Facebook\u2019s Groups (which permit the sale of items) meets Craigslist.<\/p>\n<p>As the parents of relatively young children, my wife and I have used local yard sale groups on Facebook extensively to sell items the kids have outgrown as well as buy items that we really did not want to buy brand new. To us it was like mixing the value of eBay with the convenience of not having to wait for things to come in the mail \u2014 not to mention, no shipping charges.<\/p>\n<p>If Marketplace improves or streamlines the process of buying and selling through those local groups, that sounds great. With that said, using Marketplace means buying something from a stranger online and meeting in person to exchange currency for goods. Marketplace is merely the forum for finding each other, as noted in Facebook\u2019s <a href=\"http:\/\/newsroom.fb.com\/news\/2016\/10\/introducing-marketplace-buy-and-sell-with-your-local-community\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">press materials<\/a>:<\/p>\n<p><em>Decided that you want it? Send the seller a direct message from Marketplace to tell them you\u2019re interested and make an offer. From that point on, you and the seller can work out the details in any way you choose. Facebook does not facilitate the payment or delivery of items in Marketplace.<\/em><\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">Facebook Marketplace wants to be the smarter, safer Craigslist alternative: <a href=\"https:\/\/t.co\/RSwoNjfcPl\" target=\"_blank\" rel=\"noopener nofollow\">https:\/\/t.co\/RSwoNjfcPl<\/a> <a href=\"https:\/\/t.co\/fr3a6G9kWe\" target=\"_blank\" rel=\"noopener nofollow\">pic.twitter.com\/fr3a6G9kWe<\/a><\/p>\n<p>\u2014 WIRED (@WIRED) <a href=\"https:\/\/twitter.com\/WIRED\/status\/783202752059113472?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener nofollow\">October 4, 2016<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>Whenever I purchased or sold something through a Facebook group, setting up the meetings was the worst part. I often opted to pick up an item from someone\u2019s doorstep or porch and leaving money in a mailbox rather than having a face-to-face interaction. Maybe I am paranoid, but those in-person interactions never sat well with me.<\/p>\n<p>As a seller, using the honor system worried me some, but I was typically selling something we had considered outright throwing away, so the risk was worth the reward.<\/p>\n<p>In looking into security aspect of Marketplace, I dropped a line to David Emm, a principal security researcher and member of Kaspersky Lab\u2019s GReAT. He noted that, \u201cthe fact that it\u2019s linked to a Facebook profile isn\u2019t really a protection, since it\u2019s possible to hijack accounts or create fake profiles. At the moment, Facebook is keeping out of the transaction \u2014 it\u2019s a way of them trying to engage \u2018customers.\u2019 But in the future, if they commercialize it (ads), it\u2019s possible that this might lead them to regulate transactions, including payments.\u00a0People should exercise caution about meeting and making payments to strangers.\u201d<\/p>\n<p>It\u2019s a bit early to say, but overall, Marketplace seems to be a positive addition to Facebook\u2019s platform. Anyone can use it, and it can be an easy way to obtain or offload items while using a platform that is already a part of most Internet users\u2019 daily lives.<\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">Check your Facebook privacy settings NOW <a href=\"https:\/\/t.co\/32ZyKfSVgM\" target=\"_blank\" rel=\"noopener nofollow\">https:\/\/t.co\/32ZyKfSVgM<\/a> <a href=\"https:\/\/t.co\/fvJ4RWVskL\" target=\"_blank\" rel=\"noopener nofollow\">pic.twitter.com\/fvJ4RWVskL<\/a><\/p>\n<p>\u2014 Kaspersky (@kaspersky) <a href=\"https:\/\/twitter.com\/kaspersky\/status\/658723040008773632?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener nofollow\">October 26, 2015<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>However, with that said, a level of common sense really is critical. The following are three best practices for using Marketplace (or, for that matter, other person-to-person goods sites such as Upcycle, Craigslist, Freecycle).<\/p>\n<h3>Choose a safe meeting spot<\/h3>\n<p>It\u2019s worth repeating: You are buying items from, or selling to, someone you do not know. When arranging for an exchange, try to pick a place that is public. If that is not possible, do your best to mitigate potential risks. For example, take a friend with you, or tell someone where you are going.<\/p>\n<p><a href=\"http:\/\/www.telegraph.co.uk\/news\/2016\/10\/03\/security-warnings-about-new-facebook-marketplace-where-you-can-s\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">Emm added<\/a>, \u201cIt also presents the risk of face-to-face meetings in local areas, which has the potential to be taken advantage of by criminals.\u201d<\/p>\n<p>So if you feel that you are entering a sketchy situation, just walk away. You can always tell the seller something came up and reschedule.<\/p>\n<h3>Do a gut check \u2014 is it legal? Legally obtained?<\/h3>\n<p>If you saw someone selling a 2017 <a href=\"https:\/\/kas.pr\/fast\" target=\"_blank\" rel=\"noopener noreferrer\">Ferrari<\/a> for $1,000, you would assume that car was stolen. The same can be said for a too-good-to-be-true $100 MacBook or $50 Rolex. If the deal sounds too good to be true, the item is most likely fake or stolen, and you should walk away.<\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">Sex, guns and baby hedgehogs: When Facebook Marketplace goes wrong <a href=\"https:\/\/t.co\/CpnpL97DCu\" target=\"_blank\" rel=\"noopener nofollow\">https:\/\/t.co\/CpnpL97DCu<\/a><\/p>\n<p>\u2014 The New York Times (@nytimes) <a href=\"https:\/\/twitter.com\/nytimes\/status\/783397296264339456?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener nofollow\">October 4, 2016<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>Also think twice before buying something illegal, should it find its way into the Marketplace. For example, if you decide to peruse Marketplace looking for guns, narcotics or other illicit items, consider that as a public forum, Facebook Marketplace can be viewed by law enforcement officials.<\/p>\n<h3>Use common sense<\/h3>\n<p>Ultimately, perhaps the most important safety equipment you can bring to the Marketplace is your own common sense. Whether you are buying or selling, weigh the risk against the reward for each potential transaction. By bringing these sales into Facebook, you gain a measure of convenience but give up some of your privacy by putting out identifiable data.<\/p>\n<blockquote class=\"twitter-tweet\" data-width=\"500\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">How private are you on social networks? Check now! <a href=\"https:\/\/t.co\/5Siy3g6hqB\" target=\"_blank\" rel=\"noopener nofollow\">https:\/\/t.co\/5Siy3g6hqB<\/a> <a href=\"https:\/\/twitter.com\/hashtag\/SMM?src=hash&amp;ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener nofollow\">#SMM<\/a> <a href=\"https:\/\/twitter.com\/hashtag\/SoMe?src=hash&amp;ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener nofollow\">#SoMe<\/a> <a href=\"https:\/\/twitter.com\/hashtag\/Privacy?src=hash&amp;ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener nofollow\">#Privacy<\/a> <a href=\"https:\/\/t.co\/1KjvBntpnb\" target=\"_blank\" rel=\"noopener nofollow\">pic.twitter.com\/1KjvBntpnb<\/a><\/p>\n<p>\u2014 Kaspersky (@kaspersky) <a href=\"https:\/\/twitter.com\/kaspersky\/status\/783331761044525056?ref_src=twsrc%5Etfw\" target=\"_blank\" rel=\"noopener nofollow\">October 4, 2016<\/a><\/p><\/blockquote>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><\/p>\n<p>Currently, Facebook Marketplace is brand spanking new. I for one am excited to see its evolution. Emm notes that he sees some type of regulation on the part of Facebook in the Marketplace\u2019s future: \u201cIf I buy through the Amazon Marketplace, I\u2019m offered the same protections as when I buy through Amazon, or another store \u2014 buyers and sellers don\u2019t see each other\u2019s details; the buyer doesn\u2019t pay the seller directly; and if anything goes wrong, Amazon acts as guarantor.\u00a0In the end, I think Facebook will be obliged to regulate the marketplace to one degree or another.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Kaspersky Lab\u2019s David Emm shares some security concerns he has about Facebook Marketplace.<\/p>\n","protected":false},"author":636,"featured_media":13155,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[5],"tags":[1838,20,1839,605,1146,97,422],"class_list":{"0":"post-13154","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-news","8":"tag-david-emm","9":"tag-facebook","10":"tag-facebook-marketplace","11":"tag-great","12":"tag-risks","13":"tag-security-2","14":"tag-threats"},"hreflang":[{"hreflang":"x-default","url":"https:\/\/www.kaspersky.com\/blog\/facebook-marketplace\/13154\/"},{"hreflang":"en-us","url":"https:\/\/usa.kaspersky.com\/blog\/facebook-marketplace\/7746\/"},{"hreflang":"en-gb","url":"https:\/\/www.kaspersky.co.uk\/blog\/facebook-marketplace\/7757\/"},{"hreflang":"es-mx","url":"https:\/\/latam.kaspersky.com\/blog\/facebook-marketplace\/7797\/"},{"hreflang":"es","url":"https:\/\/www.kaspersky.es\/blog\/facebook-marketplace\/9230\/"},{"hreflang":"it","url":"https:\/\/www.kaspersky.it\/blog\/facebook-marketplace\/9088\/"},{"hreflang":"tr","url":"https:\/\/www.kaspersky.com.tr\/blog\/facebook-marketplace\/2507\/"},{"hreflang":"fr","url":"https:\/\/www.kaspersky.fr\/blog\/facebook-marketplace\/6130\/"},{"hreflang":"pt-br","url":"https:\/\/www.kaspersky.com.br\/blog\/facebook-marketplace\/6614\/"},{"hreflang":"pl","url":"https:\/\/plblog.kaspersky.com\/facebook-marketplace\/5484\/"},{"hreflang":"de","url":"https:\/\/www.kaspersky.de\/blog\/facebook-marketplace\/8859\/"},{"hreflang":"ja","url":"https:\/\/blog.kaspersky.co.jp\/facebook-marketplace\/12814\/"},{"hreflang":"en-au","url":"https:\/\/www.kaspersky.com.au\/blog\/facebook-marketplace\/13154\/"},{"hreflang":"en-za","url":"https:\/\/www.kaspersky.co.za\/blog\/facebook-marketplace\/13154\/"}],"acf":[],"banners":"","maintag":{"url":"https:\/\/www.kaspersky.com\/blog\/tag\/risks\/","name":"risks"},"_links":{"self":[{"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/13154","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/users\/636"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/comments?post=13154"}],"version-history":[{"count":2,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/13154\/revisions"}],"predecessor-version":[{"id":30133,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/13154\/revisions\/30133"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/media\/13155"}],"wp:attachment":[{"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/media?parent=13154"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/categories?post=13154"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/tags?post=13154"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}