Security Review

Is depop.com legit or a scam?

Our verdict:Safe· 88/100

Depop is a legitimate 20-year-old fashion resale marketplace with strong business credentials, though users should stay in-app to avoid third-party fraud.

depop.comScanned 12h ago
0
Trust score
SAFE
Heuristics 100·MT 82
View density

Analysis Summary

Threat Intelligence
0/92
All engines report clean
Domain Age
20 years old
Registered Feb 8, 2006
MT Intelligence
Safe
Low likelihood · 95% confidence
SAFE

No threats detected

All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.

Website Preview

Screenshot of depop.com
LIVE RENDER
depop.com

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site. See full visual analysis →

Visual Screenshot Analysis

We capture a fresh screenshot of the live page and ask a vision model to look for scam visual patterns — fake trust badges, countdown timers, overlay pop-ups, and visual clones of legitimate brands.

5
/ 100
Low visual risk

Visual red flags detected in the screenshot

The screenshot depicts a fully-rendered, professionally designed page consistent with the legitimate Depop fashion resale platform, with no visual scam indicators present.

Visual risk5/100

What our vision model saw

5 signals

Page displays the recognizable Depop branding, logo, navigation, and layout consistent with the legitimate Depop marketplace.

Standard e-commerce navigation elements (Women, Men, Kids, Brands, Sports, Trending, Sale) are present and professionally rendered.

Trust indicators shown ('Buy safely — Depop Protection', '49M+ Items for sale') are consistent with Depop's known on-site messaging.

Promotional banner at bottom ('Depop Shipping is free!') is a standard non-aggressive site notification with a dismissal option.

No countdown timers, urgency tactics, suspicious overlays, or requests for sensitive credentials visible.

MT Intelligence

Advanced threat intelligence
MT Security Analyst
Low scam likelihoodengineMT · Guardiantrust82/100
MT AgentLive web researchVisual inspection
0%
Confidence
Depop.com is a genuine, long-established e-commerce platform registered in 2006 and backed by a UK-registered company (Depop Limited, incorporated 2012) currently owned by eBay. Our antivirus network flagged zero threats across 92 engines, the domain has a clean reputation, and the SSL certificate is valid. The visual design matches the legitimate Depop brand with professional navigation and trust messaging. While the evidence package documents peer-to-peer scams targeting Depop users—primarily involving off-platform payments, fake listings, and counterfeit goods—these are third-party fraud schemes, not attacks on the Depop platform itself. Independent sources confirm Depop is a legitimate marketplace; the consensus is that users must stay in-app for transactions and verify sellers to avoid external fraud. The platform's mixed Trustpilot rating reflects typical marketplace friction (customer-service complaints, refund disputes) rather than systemic illegitimacy.
Full dossier
Analysis complete

Page Content

The screenshot shows a fully-rendered, professionally designed e-commerce interface with recognizable Depop branding, standard navigation (Women, Men, Kids, Brands, Sports, Trending, Sale), and trust messaging ('Buy safely — Depop Protection', '49M+ Items for sale'). No countdown timers, urgency tactics, credential-harvesting overlays, or phishing indicators are visible.

Infrastructure

Valid SSL certificate issued by Google Trust Services, hosted on IP 172.66.0.219 with zero abuse reports and a clean reputation score. Domain redirects once (cross-domain) but shows no homoglyph or IDN spoofing. The hosting infrastructure is secure and well-maintained.

Domain History

Registered in February 2006 (7,433 days old), making it a 20-year-old domain. Depop Limited was incorporated in the UK on 3 December 2012 (company number 08316342) and remains active. The company was acquired by Etsy in 2021 for $1.6B and subsequently sold to eBay in 2026. Headquarters in London with approximately 400–500 employees and 56M+ registered users.

Web Reputation

Zero detections across our antivirus network and major browser blocklists. Independent review aggregators show mixed but predominantly positive sentiment: Depop is widely confirmed as a legitimate marketplace, though an independent review aggregator reviews reflect typical e-commerce friction (customer-service delays, refund disputes, and user-to-user fraud). Multiple credible sources (Bitdefender, ABC News, consumer guides) document peer-to-peer scams targeting Depop users via off-platform payments and fake listings, but these are third-party schemes, not platform vulnerabilities.

Risk Factors
4
  • Peer-to-peer scams are documented on the platform, primarily involving off-app payments, fake buyers/sellers, and counterfeit items.
  • Mixed an independent review aggregator reviews (around 3.1/5) include complaints about customer service responsiveness and refund handling.
  • Users who move transactions off-platform or fail to verify sellers are at risk of third-party fraud.
  • Phishing emails impersonating Depop have been reported; official communications always come from @depop.com addresses.
Positive Signals
5
  • Domain registered in 2006 with 20+ years of operational history.
  • UK-registered company (Depop Limited, #08316342) with active status and eBay ownership.
  • Zero antivirus detections across 92 engines and clean browser blocklists.
  • 56M+ registered users and professional, well-maintained platform design.
  • Multiple independent sources confirm Depop is a legitimate marketplace when users follow safety guidelines.
AI Recommendation
Depop is safe to use for buying and selling fashion items. To avoid third-party fraud, always complete transactions in-app, verify seller ratings and reviews, never pay via external methods (bank transfer, PayPal Friends & Family), and report suspicious messages or listings to Depop support.
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for depop.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age
20 yrs
Registered Feb 2006
Business registration
Active · United Kingdom
Site traces back to an actively registered business.
Clone check
Not a clone
No well-known site's layout or branding detected here.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
4 scam reports · 4 positive
Key findings
7 headline facts from open-web research
  • depop.com registered February 2006 (over 20 years old); Depop Limited incorporated in UK in 2012 (company #08316342), currently active.
  • Acquired by Etsy for $1.6B in 2021; sold to eBay for $1.2B in 2026. Headquartered in London with ~400-500 employees and 56M+ users.
  • Widespread reports of peer-to-peer scams on the platform, primarily involving off-app payments, fake buyers/sellers, phishing emails, and counterfeit items.
  • Official Depop communications always come from @depop.com addresses; company publishes warnings about suspicious messages and emails.
  • Trustpilot shows mixed reviews (around 3.1/5 in some summaries) with praise for the platform when used correctly but frequent complaints about customer service, refunds, and handling of scams/counterfeits.
  • Multiple guides and articles (Bitdefender, ABC News, YouTube creators) document rising Depop-specific scams targeting sellers via social media follow-ups and buyers via fake listings.
  • Consensus across review sites: Depop itself is a legitimate marketplace, but users must stay in-app for payments and verify sellers to avoid third-party fraud.
Scam reports (4)
Direct quotes from public scam databases, forums, and news.
  • Bitdefenderopen

    "Depop scams are on the rise as fraudsters exploit the platform’s peer-to-peer nature... Most Depop scams rely on moving transactions off-platform. Scammers often ask users to pay via external methods like bank transfer or PayPal Friends & F"

  • ABC Newsopen

    "IDCARE has had more than 30 people report being scammed after advertising clothes on Depop since July 1, with victims losing an average of $2,947 each."

  • Trustpilotopen

    "STAY AWAY from this platform as all they want to do is make money and not serve their customer base when sellers posts bogus items... if you get ripped off at depops fault (as a seller) then you wont get your money back."

  • Coveronopen

    "A Depop scam is a scheme that starts on the Depop app and aims to steal money, personal info, or merchandise. Sellers might get fake refund requests or buyers might receive counterfeit goods."

Positive reviews (4)
Quotes indicating the site is legitimate.
  • Closo.coopen

    "So, is Depop legit? Yes. It is a vibrant, chaotic, and incredibly useful marketplace for finding unique fashion... The answer to the first part is a definitive yes."

  • Zipsale.co.ukopen

    "It's important to know that this online marketplace platform is not a scam. It is a legitimate platform that enables countless consumers to buy used trendy and fashionable clothing."

  • Astrill.comopen

    "Depop is a real and widely used platform, though the risk of scams is very real... is Depop safe? The short answer is yes, but only when you take the proper precautions."

  • Trustpilotopen

    "The company is also praised for assisting with fake products and processing refunds promptly in many cases... Great platform for buying and selling/re selling overall."

Business registration
Status: active · United Kingdom

Depop Limited, company number 08316342, incorporated 3 Dec 2012, registered office in Bristol, UK. Subsidiary of eBay (acquired 2026; previously Etsy 2021). Founded 2011.

Research summary
Narrative write-up from our AI analyst, grounded on the facts above

Our research found 4 scam-related reports and 4 positive reviews. Bitdefender, ABC News, and consumer guides document peer-to-peer scams targeting Depop users—primarily involving off-platform payments, fake buyers/sellers, phishing emails, and counterfeit items. However, these are third-party fraud schemes, not attacks on Depop itself. Independent sources (Closo.co, Zipsale.co.uk, Astrill.com, and an independent review aggregator reviewers) confirm Depop is a legitimate marketplace; the consensus is that the platform is safe when users stay in-app for transactions and verify sellers. an independent review aggregator shows mixed ratings (around 3.1/5) reflecting typical e-commerce friction—customer-service complaints, refund disputes—rather than systemic illegitimacy. Business registration confirms Depop Limited is an active UK company (incorporated 2012, company #08316342) currently owned by eBay.

Antivirus Engines

Clean pass · verified
Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious62Harmless92Engines
Clean
Kaspersky
Clean
Bitdefender
Clean
Microsoft
Not in pass
ESET-NOD32
Not in pass
Avira
Not in pass
Sophos
Clean
Fortinet
Clean
Google Safebrowsing
Clean
Emsisoft
Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Domain & Encryption

Domain History
Age20 years old
RegistrarAmazon Registrar, Inc.
RegisteredFeb 8, 2006
ExpiresFeb 8, 2027
Owner privacyVisible
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerGoogle Trust Services · WE1
ExpiresAug 3, 2026 (47d)
Self-signedNo
Hosting & Technology
HostingCloudflare, Inc.
Server locationUS
PopularityTop 100k worldwide

Redirect Chain

Hops
1
Cross-domain
Yes
Lookalike
No
Punycode
No
  • 1301http://depop.com/
  • 2403https://www.depop.com/cross-domain

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPCloudflare, Inc.
Usage typeContent Delivery Network

Still, stay alert

No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.

  • Double-check the exact URL in your address bar

    Confirm you are actually on depop.com and not a lookalike like d-epop.com.com or an IDN homoglyph.

  • Use a password manager

    Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.

  • Discuss this site on the forum

    If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
Not listedCheck ↗
AbuseIPDB
Not listedCheck ↗

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review found no threat indicators on depop.com. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.
  • depop.com passed our automated security checks with a trust score of 88/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.
  • Yes. depop.com presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 47 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • depop.com is 20.4 years old, registered on 2/8/2006 through Amazon Registrar, Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
  • No. All 92 antivirus engines in our malware network report depop.com as clean.
  • No. depop.com is not currently listed on the major browser blocklist feeds that modern browsers use.
  • depop.com resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • Yes. depop.com sits in the global top-100k on Cloudflare Radar, which means it has substantial real-world traffic. That does not automatically make it safe, but established brands almost always rank here and throwaway scam domains almost never do.

Final Verdict

0
Trust / 100
Final Verdict·depop.com
SAFE

Depop is a legitimate, well-established fashion resale marketplace owned by eBay with 56M+ users and a valid UK business registration. While peer-to-peer scams do occur on the platform (as with any marketplace), the site itself is secure and trustworthy when users follow safety guidelines.

Depop is safe to use for buying and selling fashion items. To avoid third-party fraud, always complete transactions in-app, verify seller ratings and reviews, never pay via external methods (bank transfer, PayPal Friends & Family), and report suspicious messages or listings to Depop support.

AV engines
92
MT passes
2
Net signals
0
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Safe reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.