Etsy

Is Etsy safe?

Etsy is a safe place to shop if you pay through Etsy itself. Its Purchase Protection refunds orders that never arrive, arrive damaged or look nothing like the listing, account security is strong for a marketplace, and we found no data breach or regulator fine in its record. We score it 60/100, above eBay at 55 and well above Poshmark.

The catch is advertising. Etsy's App Store label says your purchases, contact details, identifiers and usage data may be used to track you across other companies' apps and websites, which is more than eBay declares. And like every marketplace, Etsy can only protect money that moves through its checkout.

How Etsy Purchase Protection works

The refund applies to qualifying orders when the item doesn't arrive, arrives damaged, turns up seven or more days after the latest estimated delivery date shown at checkout, or differs significantly from the description or photos, such as the wrong colour or material. It does not cover a change of mind; for that, the seller's own returns policy applies.

The process starts with the seller. You open a Help request in the order page, and if the problem is not solved 48 hours after your first message, you can ask Etsy to step in. Guest buyers must first connect the order to an Etsy account. Delays caused by strikes, severe weather or war are excluded, as are parcels held because the buyer did not pay import charges.

Etsy scams to watch for

Etsy's own help page on off-platform scams describes the pattern well. A seller asks you to finish the deal by text, email or WhatsApp, shows a QR code in a listing or message that promises a deal off the site, or asks you to pay by Venmo, PayPal, cash or cryptocurrency. Etsy bans all of this. Its only accepted payment routes are Etsy checkout and an approved Square integration for in-person sales, and anything paid elsewhere falls outside Purchase Protection.

To catch these moves, Etsy scans messages and their attachments with automated tools, sometimes blocks messages and occasionally has staff read them, mostly when someone reports a problem. That is a privacy trade-off worth knowing about, but it is also why scams on Etsy tend to start with an attempt to leave the platform.

The other risk is the product itself. Handmade and vintage goods come from independent sellers, and Etsy's own app listing says it does not check the condition or authenticity of vintage items. For anything pricey, read the shop's reviews and ask for extra photos before you pay.

What data does the Etsy app collect?

Apple's privacy label lists four types of data that may be used to track you: purchases, contact info, identifiers and usage data. Data linked to your identity is broader, adding financial info, location, user content, search history and diagnostics. Compare Depop, whose label lists ten tracking types, and eBay, which lists none.

The privacy policy changed on 9 October 2025. According to a comparison by the trade site Value Added Resource, it now says Etsy may share hashed identifiers that represent your email or name with partners such as Google and Facebook to target ads, and that Google Analytics data may be combined with Etsy's own data for retargeting. The update came three months after a proposed class action, White v. Etsy, alleged that pixels on Etsy's site let Google, Meta and Microsoft collect visitors' data without consent under California's wiretap law. Those are allegations; the plaintiff moved to dismiss the case in October 2025.

You can turn off personalised advertising in your Etsy privacy settings, and on an iPhone you can refuse the tracking prompt. Etsy's support chatbot runs on a third-party service, Sierra AI, and conversations are stored, so leave personal details out of it.

How secure is an Etsy account?

Better than most marketplaces. Two-factor authenticationTwo-factor authenticationSigning in with a second proof of identity on top of your password, such as a code from an app, a security key or a passkey.More in the glossary is optional for buyers but required for anyone opening a new shop, and it works with an authenticator app as well as text messages or phone calls. Once it's on, you need a code on new devices and every 30 days, and Etsy gives you one-time backup codes for when you lose your phone. Etsy also runs a paid bug bounty on Bugcrowd. We found no reported breach of Etsy customer accounts.

How to use Etsy safely

1. Turn on two-factor authenticationTwo-factor authenticationSigning in with a second proof of identity on top of your password, such as a code from an app, a security key or a passkey.More in the glossary with an authenticator app in Account settings, Security, and save the backup codes.
2. Pay only through Etsy checkout. Report any shop that asks for Venmo, PayPal, crypto or a chat on WhatsApp.
3. Keep every conversation in Etsy Messages so support can see it in a dispute.
4. Open a Help request quickly if an order is late or wrong, then escalate after 48 hours.
5. Turn off personalised ads in your privacy settings if you do not want your Etsy activity used for targeting.

How we scored it

The regulatory record (88) is the highest factor: it is clean, but we found no regulator investigation that tested Etsy's practices, so it sits just below the 90+ band. Security (70) comes next, thanks to authenticator-app 2FATwo-factor authenticationSigning in with a second proof of identity on top of your password, such as a code from an app, a security key or a passkey.More in the glossary, a paid bug bounty and no breach on record. Privacy (40) is the weakest, because the label lists purchases and contact details for tracking and the 2025 policy shares hashed identifiers with ad platforms.