Is wallapop.com legit or a scam?
Legitimate classifieds marketplace with endemic scam problem; users report phishing, fake payment links, and poor dispute resolution.
These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.
Analysis Summary
Shop shows non-delivery red flags
Legitimate classifieds marketplace with endemic scam problem; users report phishing, fake payment links, and poor dispute resolution. Several red flags typical of non-delivery shops are present. Don't pay by crypto or wire, and keep the chargeback window in mind.
Website Preview
Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.
MT Intelligence
Wallapop is a real, registered Spanish company (B-66049057, Barcelona, founded 2013) with valid SSL, clean antivirus scans, and over 12 years of domain history. However, the evidence package documents a sustained wave of scam activity on the platform itself. Multiple news outlets report phishing pages mimicking Wallapop support, fake payment links, and courier scams targeting users. The platform's an independent review aggregator score of 1.5/5 from 15,000 reviews reflects widespread user complaints about unresolved disputes and rejected claims. While independent trust aggregators rate the domain as safe, this reflects the legitimacy of the operator, not the safety of transactions. The distinction is critical: the domain is not malicious, but it is a known vector for fraud.
Web Research Findings
Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for wallapop.com, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.
- Wallapop, S.L.U. (B-66049057) is a legitimate Spanish company founded in 2013, headquartered in Barcelona, operating in Spain, Italy, and Portugal.
- The platform has a low Trustpilot score of 1.5/5 from 15K reviews, with multiple user complaints about unresolved disputes, rejected claims, and poor seller protection.
- Numerous news articles and user reports detail common scams on the platform, including fake payment links, phishing mimicking Wallapop, courier scams, and abuse of Wallapay shipping.
- Wallapop officially warns users about suspicious behavior such as requests for personal data, external links, or off-platform payments.
- Scamadviser rates wallapop.com as likely safe/legit with a long domain history (over 12 years).
- Recent acquisition by South Korean company Naver Corporation for around €650M reported in 2026.
- User discussions on Reddit and Facebook frequently mention scams targeting both buyers and sellers, though some view the company itself as trustworthy.
- Trustpilotopen
"Got scammed lately , the seller sent me a burnt iphone and I opened dispute, show evidence videos and photos and they reject the the case"
- Euroweeklynewsopen
"Wallapop scams are targeting expats and new users in Spain... The courier + fake payment link scam... phishing page"
- Russpainopen
"How mass scam schemes on Wallapop put the safety of transactions at risk in Spain... Scammers disguise themselves as Wallapop support and send links that lead to fake websites."
- Xatakaopen
"La estafa más frecuente de Wallapop sigue viva... Wallapay sigue siendo una puerta abierta para estafadores."
- Redditopen
"It's a common scam on Wallapop , and probably the reason a lot of people don't use Wallapop as a payment method."
Wallapop, S.L.U., tax ID B-66049057, registered office Avenida Meridiana 89, 08026 Barcelona. Incorporated May 23, 2013. Registered in Commercial Registry of Barcelona (Volume 46767, Folio 149, Page B-438613 or updated Volume 43,796, sheet 21, page B-438613). Recently acquired by Naver Corporation.
Our research found multiple scam reports and news articles documenting fraud on Wallapop. Euroweeklynews, Russpain, and Xataka report active phishing campaigns impersonating Wallapop support, with scammers sending fake payment links and courier scams. Trustpilot reviews (1.5/5 from 15,000 users) document unresolved disputes and rejected fraud claims. Reddit users confirm scams are common and cite poor platform protection as a reason to avoid Wallapop's payment method. Independent trust aggregators rate wallapop.com as legitimate, reflecting the company's real registration and long history. The distinction is important: the domain operator is trustworthy, but the platform itself is a known vector for user-to-user fraud.
Antivirus Engines
Security Scans
Checked against the major public blocklists used by browsers and security tools — no hits.
Domain & Encryption
Redirect Chain
- 1301http://wallapop.com/
- 2403https://wallapop.com/
Server Reputation
Scam-Type Likelihood
1 scam-type patterns detected
1 of 13 categories showed signals
We check every URL against 13 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.
- AI analyst tagged this as a fake shop.
- No phone number or postal address anywhere on the page.
1 of 13 categories showed signals
We check every URL against 13 distinct scam categories so the verdict tells you not just how risky the page is, but what kind of risk it carries. Each meter pulls from page signals, web reports, our AI analyst, vision, and the scam-network cluster — not from raw AV labels.
- AI analyst tagged this as a fake shop.
- No phone number or postal address anywhere on the page.
Fake-shop warning signs
Signals common to non-delivery scam shops were detected on this site.
- Treat wallapop.com as unverified
Do not enter credentials or send money until you have independently verified the business.
- If you already paid by card or PayPal — start a chargeback
Contact your bank or card issuer and dispute the charge as "goods not received" or "merchant fraud." PayPal users can open a case in the Resolution Centre. Act within 120 days for card chargebacks in most jurisdictions.
- Save every piece of evidence
Screenshots of the checkout, order confirmation emails, any chat transcripts, and the product listing page. Chargeback and fraud reports go faster when you have receipts.
- OpenReport the shop
Report to the FTC (reportfraud.ftc.gov), Action Fraud UK, or your local consumer-protection body. Post the URL on the MalwareTips scam forum so other buyers can find it.
Reputation Sources
How this domain rates across independent threat-intelligence and blocklist providers.
Safety FAQ
Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.
- Our automated security review marked wallapop.com as suspicious. Several warning signs were detected; it may still turn out legitimate, but you should verify it through independent channels before trusting it with money or credentials.
- wallapop.com currently scores 55/100 on our trust scale. We found enough warning signals to recommend caution. Verify the site through independent channels before entering credentials or money.
- Yes. wallapop.com presents a valid TLSv1.3 certificate issued by Amazon · Amazon RSA 2048 M01, expiring in 150 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
- wallapop.com is 12.8 years old, registered on 9/3/2013 through Amazon Registrar, Inc.. Scam domains are often freshly registered — a site under 6 months old warrants extra caution.
- No. All 93 antivirus engines in our malware network report wallapop.com as clean.
- No. wallapop.com is not currently listed on the major browser blocklist feeds that modern browsers use.
- wallapop.com resolves to an IP operated by Amazon.com, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
- Yes. wallapop.com sits in the global top-100k on Cloudflare Radar, which means it has substantial real-world traffic. That does not automatically make it safe, but established brands almost always rank here and throwaway scam domains almost never do.
User reviews & comments(0)
Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.