WebVetted ™ Beta
+ New Report

Domain Due Diligence
Report for Wallapop.com

Report Date November 19, 2025
Recommendation
Caution
Overall Summary
Suspicious
Why we think so

Wallapop.com is a well-established online marketplace focused on local classified ads, primarily active in Spain with about 23.8 million monthly visits. The site uses trusted technologies including Amazon AWS infrastructure and Google Analytics, ensuring solid technical foundations. It holds a registered trademark and has verified contact email information. However, the platform faces frequent scams reported by users involving phishing payment links, fake couriers, and fake listings. Wallapop advises users to transact only within its secure system and to avoid external payment or communication channels. Despite these risks from fraudulent third parties, Wallapop itself remains a legitimate and widely used platform with formal dispute processes. Users should exercise caution and follow safety guidelines to avoid scams.

Confidence Score
75%

Risk Insights

🛡️

Established and Legitimate Platform

Operational since 2013 with trademark protection.
Uses strong cloud and analytic technologies.
Hosts millions of user visits monthly.
⚠️

Ongoing Scam Challenges

Scams target users off-platform.
Phishing and fake listings common fraud methods.
Platform warns users and provides safety guidance.

Contradictory Signals

While the platform itself is legitimate and secure, scam activities by individual users create risks.

Signal A: Reputation: Legitimate Platform

Signal B: User Reports: Frequent Scams

Category Scores

Identity 85/100
Reputation 60/100
Technical 90/100
Content 65/100
Legal 70/100
Business Validity 80/100

Red Flags & Warnings

  • Numerous scam reports from users about phishing and fake listing scams targeting buyers and sellers.
  • Users are often asked to transact off-platform, a key risk factor for losing money.

🔎 Detailed Checks & Analysis

Domain and Technical Infrastructure

Score: 90/100
Passed

"The domain has consistent DNS and SSL configuration. Technologies include Amazon CloudFront, Google Analytics, and strong email and hosting services."

Reason: Uses reputable infrastructure (Amazon AWS), SSL valid and recently updated, and advanced analytics tools.

Traffic and User Engagement

Score: 85/100
Passed

"Traffic metrics support active and legitimate user base with average visit duration over 7 minutes."

Reason: Monthly visits around 23.8 million with low bounce rate and multiple countries, mainly Spain.

Reputation and User Feedback

Score: 55/100
Failed

"Many users warn about phishing and fake listings; platform provides safety warnings to users."

Reason: Scam reports and complaints of fraudulent activities on the platform, primarily caused by third-party scammers.

Legal and Brand Verification

Score: 80/100
Passed

"The business is legally registered, providing additional trustworthiness despite transactional risks."

Reason: Wallapop holds a live, registered trademark and operates under defined legal terms with dispute resolution mechanisms.

Blacklist and Scam Detection

Score: 100/100
Passed

"No evidence of domain being listed on scam or phishing blacklists."

Reason: Domain is not blacklisted by known crypto or phishing threat scanners and passes Google Safe Browsing checks.

Your Next Steps

  • 1
    Only trade within Wallapop's official app or website messaging and payment system.
  • 2
    Report suspicious users or transactions directly via Wallapop and to local enforcement if significant losses occur.
  • 3
    Avoid clicking external payment links or accepting shipping without official platform confirmation.
  • 4
    Verify seller profiles, avoid upfront payments for suspiciously cheap items, and meet in person when possible.

Evidence & Citations

🕵🏻 Keep investigating

Recommended →
🌐 Scan another website

Run another instant due diligence scan on any website URL. Verify before you trust!

Spot fake SaaS login pages before handing over credentials

Phishing crews spin up carbon-copy login portals for CRM and finance tools, siphoning credentials before users realize t...

Read playbook →
Analyze giveaway landing page phishing

Giveaway pages entice with consoles or flights, then harvest card data and selfies “for verification.” ScamAI checks reg...

Read playbook →