The Scam I Almost Fell For: A Buy & Bring Veteran's Warning Signs Guide

As a market researcher at RunPost, I spend my days analyzing the patterns of trust and trade that make peer-to-peer (P2P) delivery possible. But recently, I almost became a statistic myself. The experience was a stark reminder that even for seasoned users, vigilance is key. It also provided a perfect, real-world case study of the exact warning signs our platform is designed to detect and neutralize.

This guide is for our community: the savvy shoppers looking for a piece of Dubai in the Maldives, and the globetrotting travelers monetizing their luggage space between Singapore and Kuala Lumpur. Here’s the story of the scam I nearly fell for, the red flags I should have spotted sooner, and how to keep your own "buy and bring" transactions secure.

The Setup: A Deal Too Good to Be True

The request seemed simple enough. A shopper wanted a specific, high-end camera lens—a Canon RF 28-70mm f/2L USM—purchased from a well-known electronics store in Dubai and brought to Malé. The shopper's profile was new, created just a day ago, but their request was detailed and polite. The delivery fee offered was unusually generous, almost 50% higher than the typical rate for an item of that size and value. That was the first, subtle warning sign.

Red Flag #1: An Overly Generous Offer or Unrealistic Deal

Scammers often bait their targets with offers that are significantly above the market rate to encourage quick acceptance and lower their guard. In Malaysia and the UAE, scams on platforms like Dubizzle and Facebook Marketplace frequently begin with deals that seem too good to be true, designed to rush victims into a decision before they can perform due diligence. An experienced traveler knows the typical delivery fee for a small, high-value electronic item is usually 10-20% of the item's cost. An offer of 30% or more, while tempting, should trigger immediate caution.

The Pivot: Moving the Conversation Off-Platform

After I accepted the initial offer, the "shopper" sent a message that has become the classic opening gambit for fraud worldwide: "Thanks for accepting! My app is a bit buggy. Can we switch to WhatsApp to arrange the details? It’s faster. Here is my number."

This is the single most critical red flag in any P2P marketplace transaction.

Red Flag #2: The Request to Communicate or Pay Off-Platform

Legitimate platforms invest heavily in securing their messaging and payment systems to protect users. Scammers know this and will do everything they can to move you to an unmonitored channel like WhatsApp, Telegram, or direct email. Once you leave the platform's ecosystem, you lose all protections, including payment guarantees and any record of the conversation that a support team could use to help you. Grabr, a similar P2P delivery service, explicitly states that transacting outside their platform violates their terms of use and exposes users to fraud. In a widely reported scam in the UAE, fraudsters on classifieds sites immediately ask to move to WhatsApp where they can send sophisticated phishing links disguised as payment portals.

How RunPost's Verification System Catches This:

RunPost’s systems are designed to flag messages containing personal contact information like phone numbers or email addresses before they are even sent, reminding both parties to keep all communication on the platform for their safety. Furthermore, our hypothetical user verification process links a user's account to a verified phone number and email, reducing the "need" to share this information.

The Phony Payment: Fake Proof and Urgent Demands

Against my better judgment—but for the sake of research—I continued the conversation on WhatsApp. The "shopper" was incredibly responsive. They sent a screenshot of what looked like a legitimate payment confirmation from a bank, stating the full amount for the lens plus my delivery fee had been transferred to a third-party "payment holding" service. The confirmation email they forwarded, however, had a generic Gmail address in the "from" field.

Then came the pressure: "The money has been sent, you can see the proof. Please buy the lens quickly, it's the last one in stock at this price! You will get the release code from the payment service as soon as you upload the purchase receipt."

Red Flag #3: Fake Proof of Payment & Pressure Tactics

Scammers excel at creating a false sense of urgency. They know that if they can get you to act quickly, you're less likely to scrutinize the details. Fake payment receipts, whether doctored screenshots or official-looking but fraudulent emails, are a cornerstone of this tactic. In the Philippines, a common P2P scam involves buyers sending fake GCash text notifications that mimic the real thing, pressuring sellers to release their crypto assets before they can verify the funds have actually landed in their account.

A legitimate P2P platform like RunPost will never consider a screenshot as proof of payment. The transaction status inside the app is the only source of truth.

How RunPost's Verification System Catches This:

On RunPost, payment is made directly between the shopper and the traveler, so there is never a third-party service holding the money. Here’s how a safe deal works:

1. Agree in the Chat: The shopper and traveler agree the item, the price, the delivery fee and any deposit in the RunPost chat, so there is a record.
2. Deposit Paid Directly: For expensive items, the shopper pays the agreed deposit straight to the traveler. Any message claiming the money is "held" somewhere else is a red flag.
3. Traveler Buys Item: The traveler buys the item and shares the receipt and photos in the chat.
4. Handover & Payment: The shopper checks the item at handover and pays the traveler the rest directly, as agreed.

Because no one is waiting on a "release code" from a payment service, a fake payment proof has nothing to hide behind.

The Customs Twist: An Unexpected "Fee"

Let's imagine I had fallen for the scam and purchased the lens. The next stage of this fraud, often employed in cross-border transactions, would have likely involved customs. The scammer, posing as the shopper, might send a panicked message upon my arrival in Malé:

"My friend at the airport says customs is holding the package! They are asking for a $150 'verification fee' to release it. Can you please pay it? I will transfer the money to you right away, I'll even add extra for your trouble."

This is a sophisticated manipulation that preys on the traveler's desire to complete the delivery and get paid.

Red Flag #4: Unexpected, Last-Minute Fees or Problems

Scammers invent non-existent problems to extract more money. This is especially common in scams involving shipping or customs. Fraudsters impersonating U.S. Customs and Border Protection (CBP) often call victims claiming a package is being held and requires a fee to be released, demanding payment via gift cards or wire transfer. Similarly, a scam reported in Malaysia involved fake buyers insisting on using a specific, unknown courier and then demanding extra "insurance fees" before vanishing.

Remember, as the traveler, you are the importer. It is your responsibility to understand and handle legitimate customs duties. These are paid directly to official government agencies at the port of entry, never to a "personal account" of the shopper or a third party via a P2P app.

How RunPost's Verification System Catches This:

RunPost's platform provides clear educational resources on customs responsibilities for both shoppers and travelers on key routes. All amounts are agreed up front in the RunPost chat. Any request for additional funds that was not agreed there for "customs fees" would be a clear violation of terms and a major red flag that users are educated to spot. Our system would also never facilitate such a side-payment.

Anatomy of a Safe Transaction: The RunPost Way

A secure "buy and bring" platform is built on layers of verification and trust. Here’s how the transaction should work, and the features designed to prevent the red flags I encountered.

1. Robust User Verification

Before they can even interact, both the shopper and traveler undergo a multi-step verification process. This isn't just a simple email confirmation.

• Identity Verification: Users must submit a government-issued ID (like a passport or national ID card), which is verified by a trusted third-party service like Stripe Identity. This often includes a biometric check, comparing a live selfie to the ID photo to ensure the user is who they say they are. This step immediately filters out most scammers who rely on anonymity.
• Phone & Email Verification: A two-factor authentication (2FA) process confirms control of a phone number and email address, adding another layer of security.
• Payment Method Verification: A shopper's credit card is authenticated by the payment processor to confirm they are the authorized cardholder, reducing the risk of chargeback fraud.

2. Transparent Reputation System

New profiles are not a dealbreaker, but a history of positive transactions is a powerful trust signal. After every completed delivery, both shopper and traveler are prompted to leave a detailed, two-way rating on communication, timeliness, and item condition. This peer-review system allows users to make informed decisions based on community experience.

3. Agreements in the RunPost Chat

As highlighted, all communication should stay on the platform. The in-app chat keeps a record of every agreement, including the price, any deposit and how the shopper will pay the traveler directly at handover, which protects both parties if anything is disputed.

What to Do If You See a Scam

Trust your instincts. If a deal feels rushed, a story seems inconsistent, or a request seems unusual, it probably is.

1. Stop Communicating: Do not engage further. Do not try to call them out. Immediately cease all contact.
2. Do NOT Move Off-Platform: Never share your phone number, email, or social media handles. Politely insist that all communication must stay within the app for everyone's safety. A legitimate user will understand; a scammer will protest or disappear.
3. Report the User: Use the in-app reporting tools to flag the suspicious profile and conversation. Provide as much detail as possible. Platforms rely on these user reports to identify and remove bad actors quickly. On RunPost, you can report a user directly from their profile or from within the message thread.
4. Contact Support: If you have any doubts, reach out to the platform's customer support team before taking any action, like purchasing an item.

Conclusion

The P2P "buy and bring" economy thrives on trust and community. While platforms like RunPost build the infrastructure for that trust with robust verification and secure payment systems, the final line of defense is an educated and vigilant user. By recognizing these red flags, you can avoid the scams I almost fell for and ensure every cross-border transaction is safe and successful. When you transact through a verified platform like RunPost, you are not just connecting with another person; you are tapping into a system designed to protect you every step of the way.

References

1. RunPost Market Research Report: Cross-border peer-to-peer buy and bring marketplace scam prevention strategies Southeast Asia Middle East.
2. RunPost Market Research Report: Red flags for fake personal shopper services off-platform payment requests.
3. RunPost Market Research Report: How to verify traveler identity and luggage capacity for cross-border shopping.
4. Maldives Customs: A Guide for International Shoppers and P2P Couriers.