This week’s pattern: fake “order confirmation” phishing emails referencing real-looking order numbers, timed to the season’s peak order volume when a seller is least likely to scrutinize each notification carefully.
The setup
Several sellers reported emails this week formatted to look like Etsy order notifications, complete with a plausible order number and buyer name, asking the seller to “confirm shipping details” or “verify payment” through an included link. With genuine order volume high enough that many sellers are processing dozens of real notifications daily, a well-formatted fake one blends in more easily than it would during a quieter month.
Why volume itself is the vulnerability here
The core trick isn’t sophisticated, it’s a fake notification designed to look routine. What makes December specifically risky is that routine is exactly the problem: when you’re moving quickly through a high volume of legitimate order notifications, a fake one formatted similarly is far more likely to get an automatic click than it would if you were reviewing each message with full attention.
How to verify before clicking anything
Any legitimate order action, confirming shipping, checking payment status, should be handled directly inside Shop Manager or the Etsy app, not through a link in an email, however official it looks. If a notification asks you to click through to “confirm” something, open Etsy directly through your browser or app instead, and check the actual order there rather than trusting the emailed link.
Slow down on notification-heavy days specifically
Given how much volume you’re likely processing right now, it’s worth deliberately building in a small amount of friction, even just a habit of always navigating to Etsy directly rather than clicking through emailed links, precisely during the weeks where you’re most likely to be moving quickly and least likely to scrutinize each individual message.
What to do if you’re unsure about a specific notification
Cross-check any suspicious notification against your actual current orders in Shop Manager. If the referenced order doesn’t appear there, or details don’t match, it’s fake, regardless of how convincing the formatting looked.
The pattern worth remembering this month
Scammers count on volume and urgency working in their favor during your busiest weeks. The defense doesn’t change: verify through Etsy directly, never through an emailed link, and build in a moment of deliberate slowdown specifically because this is the time of year you’re most likely to be moving too fast to notice something’s off.
