Online marketplaces have made it easier than ever to find what you need from a global pool of vendors. But that convenience attracts bad actors as well — fake listings, phishing attempts, account takeovers, and impersonation scams are all real risks. The good news: a small set of habits will protect you against the overwhelming majority of marketplace threats. Below are ten practical security tips drawn from our experience operating Patrick Market and observing what does and does not work for our buyers.
Phishing pages mimic real marketplace login screens and harvest credentials. Bookmark the official Patrick Market URL and type or click your bookmark every time. Never click a "login" link from an email, social media post, or unknown chat message. Confirm the address bar shows stashpatrick.tl exactly — typo-squatted variants like stashpatricks.tl, stash-patrick.tl, or numeric look-alikes are common phishing vectors.
Two-factor authentication (2FA) is the single biggest security upgrade an account can have. Even if a password leaks, an attacker cannot log in without your second factor. Use a hardware security key or an authenticator app (Aegis, 2FAS, Authy). Avoid SMS-based 2FA where possible — SIM-swap attacks are a real threat.
Password reuse is the #1 cause of account compromises across the entire web. Credential-stuffing attacks try leaked passwords from other sites against millions of accounts; if your marketplace password is the same one you used on another site that suffered a breach, attackers will eventually try it. A password manager (Bitwarden, KeePass, 1Password) makes generating and storing unique passwords easy.
Before placing an order, scan the vendor's recent reviews. Look at the most recent ten reviews — not just the lifetime average. A vendor whose reputation collapsed in the last 30 days may have changed hands or rolled out a deceptive listing. Patrick Market's verified-vendor badge is a strong signal but not a substitute for reading actual feedback from real buyers.
Some scammers approach buyers with offers of "discounted" rates outside the platform escrow. This is virtually always a trap. The discount the scammer offers does not exist; the funds simply disappear. Patrick Market's escrow exists precisely to protect both parties. Use it always, even when a vendor with strong reputation suggests otherwise.
External messengers (Telegram, Signal, Wickr, email) bypass our ability to mediate disputes. They are also a common impersonation vector — anyone can claim to be a vendor on an external messenger. On-platform messages have the vendor's verified identity attached and remain available for our mediation team to review.
The auto-release window exists for a reason — take advantage of it. After receiving your order, take time to verify it matches the listing description: correct item, correct quantity, expected condition. If anything is wrong, open a dispute before the auto-release window expires. Once escrow releases, mediation can no longer recover funds.
Common scams include fake "support staff" reaching out via direct message asking for credentials; fake "marketplace" emails asking you to "verify" your account by clicking a link; and fake vendor pages offering identical listings at lower prices. Patrick Market staff will never ask for your password, secret phrase, or two-factor codes via any channel. If anyone makes such a request, they are an impostor.
Account compromise often starts at the device level — malware, browser extensions that read passwords, or shared computers. Use a dedicated browser profile for marketplace activity. Avoid installing unknown browser extensions. Keep your operating system and browser updated. On shared computers, never save passwords or stay logged in.
If you notice suspicious activity — a vendor behaving deceptively, a phishing attempt, an unauthorized login alert, or a security vulnerability — report it through the Contact page security category. Quick reports allow us to protect other buyers and remove bad actors from the platform faster. The marketplace stays safe because users actively contribute to its safety.
Following these ten habits will protect you against the overwhelming majority of marketplace threats. None of them require special technical skill; all of them are simple to make routine. Patrick Market's verification system, escrow protection, and on-platform messaging are designed to do most of the heavy lifting for security — but the final layer of defense is always you, the buyer, choosing safe practices.
For more on how the platform itself protects you, read our deep dive on the Verified Vendor System. For new users, the Buyer's Guide walks through your first transaction step by step.