Trade safely on Fundort

Are all listings genuine?

The vast majority of listings on Fundort are genuine. Unfortunately – as on every large platform – scammers also lurk, trying to make money with fake offers.

With a little attention you'll spot most scams immediately. The following warning signs should make you wary.

How Fundort protects you

On Fundort, safety isn't an add-on — it's the foundation. Here's what's behind it:

• Verified members — Multi-stage verification (email, phone number and ID) keeps fake profiles out.
• Buyer protection & secure payment — For paid shipped purchases your money is held in escrow and only released once the goods have arrived. Always pay through Fundort — never directly to the seller, in cash or outside the platform, otherwise buyer protection does not apply.
• Protection of your contact details — Exchanges run through the platform chat; contact details in ads and messages are protected automatically — against luring off-platform and data misuse.
• Image & content checks — Uploaded images are moderated automatically and suspicious content is detected.
• Swiss data hosting & your rights — Your data is hosted in Switzerland. You can view and export it at any time and have your account deleted.
• Secure tech & abuse prevention — Encrypted credentials, password security check, blocking of disposable addresses and automatic abuse detection.

Typical signs of fake listings

• Suspiciously low prices — If an offer seems «too good to be true», be careful.
• Advance payment & flimsy excuses — The seller is supposedly «abroad» and demands dubious advance payment by bank transfer or cryptocurrency instead of secure payment.
• Off the platform — You're pushed to switch to WhatsApp or SMS to escape the platform's safeguards.
• Phishing links — Links to supposed courier services or payment pages that try to grab your data or card number.
• No or poor ratings — Brand-new profiles with no history, or with negative reviews, are a warning sign.

How to protect yourself

• Always check the other party's profile and ratings.
• Stay in the Fundort chat: sharing contact details (phone, email, address) there is automatically blocked for your protection. Always handle communication and payment through the platform.
• Pay securely through the platform or with Buyer Protection. Never pay in advance by bank transfer or crypto.
• For expensive items, hand over in person where possible, goods in exchange for payment.
• Don't open links to alleged «courier services», and never enter card or login details on linked pages.
• Enable two-factor authentication (authenticator app) — this keeps your account safe even if your password is stolen.

You can’t get into your account (two-factor sign-in)

Two-factor sign-in protects your account even when somebody knows your password. Which also means: if you lose the second factor, it locks you out just as reliably. There are three typical cases, and the first two are solved in a minute.

The app shows codes, but Fundort rejects them

That is almost always your phone’s clock. Codes are calculated from the device time and change every 30 seconds; if the clock is more than a minute off, every single code is wrong even though the app looks perfectly fine. Set date and time to automatic in your phone settings. Google Authenticator additionally has “Time correction for codes” under Settings — one tap is enough. Then sign in as usual.

Phone gone, entry deleted or app reinstalled

Then use one of your backup codes. You received eight of them during setup, with an explicit note to keep them somewhere other than your phone. A backup code goes into the same code field as the app code when signing in — no other route and no request to us. Each code works exactly once. Once you are back in, generate new backup codes in your account settings: the old ones are used up or outdated.

The backup codes are gone too

Then the letter remains. We send you a one-time code by post to the address stored in your account. It takes a few days, and that is exactly the point: a letter goes to an address that already belonged to your account before the incident, and it cannot be changed along this route. Nobody can pretend to be you on the phone or by email and talk us into it — there is no human involved who could be talked into anything. This is how it works:

1. On the sign-in page where the code is requested, click “I can’t access my backup codes either”.
2. Enter your email address and password. You need the password at every step — without it nothing happens at all. No letter goes out yet.
3. You see, abbreviated, which address the letter would go to. If it is out of date, stop here and contact support — it cannot be changed along this route.
4. You order the letter. From then on it is on its way and cannot be recalled. At the same time an email goes to your stored address — as a warning in case it wasn’t you.
5. The letter arrives and you enter the code on the same page. Two-factor sign-in is then removed. You sign in with email and password and set up a new authenticator app afterwards.

What the letter costs

The recovery letter costs money — printing and postage are not paid by everyone else, but by whoever triggers it. You see the exact amount on the recovery page before you order; it goes on your next Fundort invoice, so nothing has to be paid up front. You are only charged for a letter that actually goes out: if sending fails, no item is created. The first two routes — correcting the clock and using a backup code — are free, which is why they come first. And if you did not order the letter: contact us and we will cancel the fee.

What deliberately does not work

• The address cannot be changed along this route. Otherwise “redirect the letter to my own address” would be the most convenient way into somebody else’s account.
• There are no unlimited letters: a fixed maximum per account and year, and a waiting period between two letters. A new letter also invalidates the code from the previous one.
• After recovery you cannot change your payout account or your email address for three days. If the letter did fall into the wrong hands, the account cannot be turned into money during that time — and you have time to react.
• All existing sessions and trusted devices are ended. Anyone who was signed in gets logged out — including someone who was in without permission.

Go to recovery

Report a suspicious listing

Something looks suspicious? Report the listing directly via the «Report» button on the listing page. Our team reviews every tip.