Phishing and smishing messages are designed to look like legitimate DoneDeal communications—but they’re not. Their aim is to trick you into clicking a link, sharing personal details, or giving access to your account.
These scams can arrive through the DoneDeal message centre or directly via SMS.
Knowing how they work makes them much easier to spot.
What is phishing and smishing?
Phishing: scam messages sent through the DoneDeal message centre or email
Smishing: scam messages sent via SMS (text message)
Both usually pretend to be from DoneDeal or a “buyer” or “seller” on the site.
How these scams typically work
Step 1: You receive an unexpected message
The message may claim:
There’s an issue with your account
Your ad has been suspended or removed
You need to verify your identity
A buyer has paid and you need to confirm details
The message often creates urgency.
Step 2: You’re asked to click a link
The message includes a link that appears to lead to:
DoneDeal
A payment page
A verification or security check
The link may look convincing, but it leads to a fake website designed to steal:
Login details
Personal information
Card or banking details
Step 3: Details are requested
Once on the fake site, you may be asked to enter:
Your DoneDeal login
One-time passcodes
Bank or card details
If entered, scammers can:
Take over your account
Impersonate you
Attempt to steal money
Common warning signs
Messages that:
Pressure you to act quickly
Threaten account suspension
Ask for login details or codes
Contain spelling mistakes or unusual phrasing
Ask you to click links to “secure” your account
🚩 Message centre messages claiming to be from DoneDeal
🚩 SMS messages claiming to be from DoneDeal
🚩 Messages asking you to move off the platform
Important things to know
DoneDeal will never ask for your password or one-time codes
DoneDeal will never ask for card or banking details via message or SMS
DoneDeal will never contact you via the Message Centre
Genuine DoneDeal messages won’t pressure you or threaten immediate action
If you’re being rushed, pause.
How to protect yourself
Don’t click links in unexpected messages
If you’re unsure, don’t open the link—even if it looks legitimate.
Keep communication on DoneDeal
The message centre helps protect you and allows us to act quickly and report the conversation if something goes wrong.
Never share one-time codes
Codes sent to your phone or email are for you only. Sharing them can give someone access to your account.
Check before you act
If something doesn’t feel right, stop and double-check through the Help Centre.
If you receive a suspicious message
Don’t click any links
Don’t reply or share information
Report the message through the Message Centre
Reporting helps us remove scam accounts quickly and protect other users.
Phishing and smishing scams rely on pressure and confusion—but a moment’s pause can stop them in their tracks.
Deal calmly, stay on-platform, and remember: if something doesn’t feel right, it’s okay to walk away.
Contact Us
If you have any further questions or would like to chat, please reach out to our Customer Support team.