The Fake Etsy Suspension Email Making the Rounds

Sellers in the r/EtsySellers and Etsy Community Forums have been posting screenshots of the same phishing email since Monday: a notice claiming the recipient’s shop has been “flagged for suspicious activity” and will be permanently suspended within 24 hours unless they “verify” their account through a linked form.

If you run a shop and haven’t seen it yet, you probably will this week. Here’s what it looks like and how to tell it apart from the real thing.

What the fake email looks like

The subject line varies, but the ones I’ve seen posted most often read something close to “Action Required: Your Etsy Shop Will Be Suspended” or “Etsy Account Verification Needed Immediately.” The body uses Etsy’s orange color scheme and a logo that’s close enough to pass a glance, but the sender address is the giveaway every time. Real Etsy mail comes from an @etsy.com address. The versions circulating this week have come from domains like etsy-support-verify.com, etsy-accounts-help.net, and similar variations, none of which Etsy owns or uses.

The message pushes urgency hard. Several sellers reported the email threatens suspension “within 24 hours” or says a “final review” is already in progress, then links to a page asking for the shop owner’s Etsy login, and in some versions, bank or card details “to confirm payment eligibility.” That last part is the clearest tell. Etsy does not ask sellers to re-enter payment or banking information through an emailed link to avoid a suspension.

One seller on the forums described getting the email twice in one week, each time with a slightly different fake sender address, which matches how these campaigns usually work: the same template gets sent from a rotating list of domains as the old ones get flagged and blocked by spam filters.

What a real Etsy suspension notice looks like

If Etsy actually restricts or suspends a shop, the notice shows up two places at once: in the seller’s email inbox from an @etsy.com address, and inside the Shop Manager dashboard as a banner or warning message. A real notice will reference specific policy sections or order numbers tied to the action, not a vague “suspicious activity” claim with no detail.

Real Etsy correspondence also never asks for a password by email. Any action Etsy needs from a seller happens after logging in the normal way, not through a form embedded in the message itself.

The practical test is simple. Open a browser, type etsy.com yourself instead of clicking anything in the email, and check Shop Manager. If there’s no matching notice sitting in the account, the email is fake.

What to do if you get one

Don’t click the link. Don’t enter anything into it, even just to “see what it says.” If you already clicked through and entered your Etsy password, change it immediately, both on Etsy and anywhere else you reused it, and check your Shop Manager account activity for anything unfamiliar.

Etsy has a dedicated reporting channel for phishing attempts: forwarding suspicious emails to ReportPhishing@etsy.com, exactly as outlined in Etsy’s official guidance on identifying and reporting phishing scams.

This isn’t the first wave of Etsy-impersonation phishing, and it won’t be the last. The pattern holds steady each time: check the sender domain, remember that real account actions surface inside Shop Manager, and treat any email demanding immediate login or payment details as fake until proven otherwise.