Security Review

Is mercari.com legit or a scam?

Our verdict:Safe· 87/100

Legitimate C2C marketplace platform with 8,000+ day history, but hosts third-party scammers and has high complaint volume from buyer/seller disputes.

mercari.comScanned 12h ago
0
Trust score
SAFE
Heuristics 100·MT 80
View density

Analysis Summary

Threat Intelligence
0/92
All engines report clean
Domain Age
22 years old
Registered Jul 16, 2004
MT Intelligence
Safe
Low likelihood · 92% confidence
SAFE

No threats detected

All checks passed. This site appears legitimate — but always stay alert for phishing even on trusted domains.

Website Preview

Screenshot of mercari.com
LIVE RENDER
mercari.com

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

MT Intelligence

Advanced threat intelligence
MT Security Analyst
Low scam likelihoodengineMT · Guardiantrust80/100
MT AgentLive web researchVisual inspection
0%
Confidence
Mercari is a well-established, publicly-traded Japanese company with active business registrations, valid SSL, and clean antivirus scans across our network. The domain has existed for over 21 years and ranks in the global top-100k by traffic. However, the evidence package shows 5,693 BBB complaints and negative an independent review aggregator reviews accusing the company of poor dispute resolution, favoring buyers, and slow refunds—not because Mercari itself is fraudulent, but because the platform attracts scammers and handles user conflicts inconsistently. Security vendors (Avast, Norton) confirm Mercari.com is legitimate but warn that peer-to-peer marketplaces inherently carry buyer/seller fraud risk. The complaints reflect platform governance issues and third-party scammer activity, not a scam operation by the company.
Full dossier
Analysis complete

Page Content

Mercari.com is the official domain of Mercari, Inc., a C2C (consumer-to-consumer) marketplace where users buy and sell secondhand goods. The platform operates globally with millions of active users and includes buyer/seller protections and dispute resolution mechanisms.

Infrastructure

Domain age: 8,005 days (registered ~2004–2008). Hosting IP 99.84.234.97 has zero abuse reports and a clean reputation score. SSL certificate issued by Amazon is valid for 169 days. All antivirus engines (0/92) report clean; no malware or phishing detected.

Domain History

Mercari, Inc. was founded February 1, 2013, in Tokyo, Japan. The company holds active Japanese business registrations, a Qualified Invoice number, and a Secondhand Dealer License. US operations are based in Palo Alto, California. The domain predates the company's founding, consistent with a major platform acquisition or long-term registration.

Web Reputation

Independent trust aggregators rate the site 69/100 (moderate trust). Security vendors classify Mercari.com as a legitimate platform. However, the platform hosts significant user complaints: 5,693 BBB complaints document disputes over refunds, return fraud, counterfeit goods, and poor support responsiveness. Trustpilot reviews average ~1.2/5 stars, with users reporting unresolved disputes and funds withheld. These complaints reflect third-party scammer activity and platform governance gaps, not fraud by Mercari itself.

Risk Factors
5
  • 5,693 BBB complaints filed against the company, primarily alleging poor dispute resolution and withheld refunds.
  • an independent review aggregator average rating ~1.2/5 stars with reviews accusing the company of favoring buyers and slow refunds.
  • High volume of documented buyer/seller scams on the platform, including return fraud (item switching) and counterfeit goods.
  • Users report frustration with Mercari's dispute resolution process and lack of responsiveness to complaints.
  • Platform attracts third-party scammers exploiting the peer-to-peer model; off-platform payment requests and damaged-item claims are common fraud vectors.
Positive Signals
5
  • Domain age 8,005 days with consistent operation as a major C2C marketplace since 2013.
  • Legitimate Japanese public company with active business registrations, licenses, and US office in Palo Alto.
  • Valid SSL certificate, clean antivirus scans (0/92 engines), and zero abuse reports on hosting IP.
  • Security vendors (Avast, Norton) confirm Mercari.com is a legitimate platform with built-in buyer/seller protections.
  • Ranks in global top-100k by traffic, indicating substantial user base and operational legitimacy.
AI Recommendation
Mercari.com is safe to use as a marketplace platform, but exercise caution when buying or selling: verify seller/buyer reputation, use platform payment methods (never pay off-platform), inspect items carefully upon receipt, and document all communications. If a dispute arises, escalate through Mercari's official resolution process rather than trusting external mediators.
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for mercari.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Domain age
21 yrs
Registered Jul 2004
Business registration
Active · Japan
Site traces back to an actively registered business.
Independent review aggregators
69/100 · mixed
Average across 1 independent review aggregator.
Clone check
Not a clone
No well-known site's layout or branding detected here.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
5 scam reports · 5693 complaints · 4 positive
Web ratings
Scores pulled directly from third-party trust & review sites
ScamAdviser
69/100
Moderate trustopen
Key findings
7 headline facts from open-web research
  • mercari.com is the official domain of Mercari, Inc., a legitimate Japanese public company founded in 2013 with headquarters in Tokyo and a US presence in Palo Alto.
  • Domain registered around 2004-2008 (age aligns with 8005 days provided); operates as a major C2C marketplace with millions of users.
  • High volume of user complaints documented: 5,693 BBB complaints in recent years; Trustpilot score ~1.2/5 with reviews accusing the company of stealing seller funds, poor support, and favoring buyers.
  • Widespread reports of buyer/seller scams on the platform including return fraud (item switching), counterfeit goods, off-platform payment requests, and damaged item claims; Mercari publishes official scam awareness pages.
  • Multiple security sites (Avast, Norton, others) confirm Mercari.com itself is legitimate but warn of third-party scammers common on peer-to-peer marketplaces.
  • Company holds Japanese business registrations and licenses; maintains fraud mitigation policies and buyer/seller protections within the app.
  • Reddit and Facebook groups show mixed experiences: some users report successful transactions, others describe unresolved disputes and frustration with Mercari's resolution process.
Scam reports (5)
Direct quotes from public scam databases, forums, and news.
  • Trustpilotopen

    "MERCARI INC YOU ARE THIEVES! ... mercari incorporated STOLE my sales money and WILL NOT return it.... MERCARI INC ARE THIEVES!"

  • Trustpilotopen

    "They are a total scam company. I was sent a literal box of trash from a seller."

  • Facebookopen

    "I became a victim of what I believe is a return fraud scam on Mercari involving an expensive perfume. ... Mercari approved the return, and when I received the package back, it contained a different perfume bottle"

  • "5,693 complaint(s) filed against business"

  • YouTubeopen

    "I Got Scammed On Mercari. What Happened Next Was Worse."

Positive reviews (4)
Quotes indicating the site is legitimate.
  • Avastopen

    "Mercari is a legitimate platform, but like many online marketplaces, it can attract scammers. ... Mercari is considered a legitimate website."

  • Nortonopen

    "While the platform is legitimate, scammers prowl on Mercari... Mercari is generally a safe online marketplace"

  • Crosslistopen

    "Is Mercari legit? Mercari is a 100% legitimate online marketplace."

  • Trustdaleopen

    "Yes, Mercari is a legitimate platform with millions of active users and real buyer and seller protections."

Business registration
Status: active · Japan

Mercari, Inc. founded Feb 1 2013, Tokyo HQ, Qualified invoice #T6010701027558, Secondhand Dealer License #301112118104 (Tokyo). US office in Palo Alto. Public company.

Research summary
Narrative write-up from our AI analyst, grounded on the facts above

Mercari.com is confirmed as a legitimate Japanese public company founded in 2013 with active business registrations and licenses. However, the platform has accumulated 5,693 BBB complaints and low an independent review aggregator ratings (~1.2/5 stars) from users reporting withheld refunds, return fraud (item switching), counterfeit goods, and unresponsive support. Security vendors (Avast, Norton) classify Mercari itself as safe but warn that peer-to-peer marketplaces attract third-party scammers. Positive reviews from independent security sites confirm the platform is legitimate and operates buyer/seller protections. The high complaint volume reflects governance gaps and third-party fraud on the platform, not fraud by Mercari itself.

Antivirus Engines

Clean pass · verified
Clean across 92 engines

We cross-check every URL against our antivirus network of 92 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious59Harmless92Engines
Clean
Kaspersky
Clean
Bitdefender
Clean
Microsoft
Not in pass
ESET-NOD32
Not in pass
Avira
Not in pass
Sophos
Clean
Fortinet
Clean
Google Safebrowsing
Clean
Emsisoft
Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Domain & Encryption

Domain History
Age22 years old
RegistrarMarkMonitor Inc.
RegisteredJul 16, 2004
ExpiresJul 16, 2027
Owner privacyVisible
Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerAmazon · Amazon RSA 2048 M01
ExpiresDec 3, 2026 (169d)
Self-signedNo
Hosting & Technology
HostingAmazon.com, Inc.
Server locationUS
PopularityTop 100k worldwide

Redirect Chain

Hops
1
Cross-domain
Yes
Lookalike
No
Punycode
No
  • 1301http://mercari.com/
  • 2403https://www.mercari.com/cross-domain

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPAmazon.com, Inc.
Usage typeContent Delivery Network

Still, stay alert

No major threat indicators — but a clean scan does not guarantee every page is safe, and phishing emails routinely spoof real domains.

  • Double-check the exact URL in your address bar

    Confirm you are actually on mercari.com and not a lookalike like m-ercari.com.com or an IDN homoglyph.

  • Use a password manager

    Password managers only auto-fill on the exact domain they were saved for — they refuse to fill lookalike domains, which is the single best phishing defence.

  • Discuss this site on the forum

    If you have first-hand experience with this site — good or bad — share it with the MalwareTips community.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
Not listedCheck ↗
AbuseIPDB
Not listedCheck ↗

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review found no threat indicators on mercari.com. The site appears legitimate based on the signals we checked, but always stay alert for phishing emails that spoof real domains.
  • mercari.com passed our automated security checks with a trust score of 87/100. No antivirus engines or major blacklists flagged the site at the time of the last scan.
  • Yes. mercari.com presents a valid TLSv1.3 certificate issued by Amazon · Amazon RSA 2048 M01, expiring in 169 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • mercari.com is 21.9 years old, registered on 7/16/2004 through MarkMonitor Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
  • No. All 92 antivirus engines in our malware network report mercari.com as clean.
  • No. mercari.com is not currently listed on the major browser blocklist feeds that modern browsers use.
  • mercari.com resolves to an IP operated by Amazon.com, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • Independent trust-rating sites currently show the following for mercari.com: ScamAdviser: 69/100. Those scores come from user reviews and their own heuristics, so they are worth comparing against our verdict.

Final Verdict

0
Trust / 100
Final Verdict·mercari.com
SAFE

Mercari.com is the official domain of a legitimate Japanese public company founded in 2013 and operating a major peer-to-peer marketplace. While the platform itself is safe, user complaints reflect common marketplace risks—scammers using the platform, return fraud, and disputes—not fraud by Mercari itself.

Mercari.com is safe to use as a marketplace platform, but exercise caution when buying or selling: verify seller/buyer reputation, use platform payment methods (never pay off-platform), inspect items carefully upon receipt, and document all communications. If a dispute arises, escalate through Mercari's official resolution process rather than trusting external mediators.

AV engines
92
MT passes
2
Net signals
0
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Safe reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.