An online car transaction has three separate verification problems: does the advertised vehicle exist, is the person entitled to sell it, and are the payment instructions genuine? A convincing profile, correct registration number or plausible report can answer none of those questions on its own.
The same discipline protects sellers. A buyer's screenshot is not proof that funds have arrived, and a request to refund an overpayment can turn an ordinary advertisement into a loss.
Evaluate the listing without trusting the profile
Compare the exact model, variant and condition with other advertisements. A low price needs an explanation, but there is no universal percentage that separates a bargain from a scam.
Search distinctive wording and images for reused advertisements. Check whether locations, descriptions and photographs remain consistent. Reused images or a recently created account warrant questions; an old account is not a guarantee because accounts can be compromised.
Keep the advertisement and messages. Avoid moving immediately to an unfamiliar link or messaging service simply because the other party says the platform is not working.
Establish the real car and the authority to sell
Ask for the VIN and registration jurisdiction, then arrange to view the actual car. A video can help organise an enquiry, but it should not replace a physical inspection before payment for an expensive vehicle.
At the viewing, reconcile accessible VIN locations, documents and seller identification. If the seller acts for another person or business, establish the authority. Do not send unrestricted identity copies to an unknown person simply to “prove you are serious”.
A registry search for a copied VIN may return genuine information about a different car. Consumer Affairs Victoria's vehicle-status guidance recommends physically sighting the vehicle and VIN or chassis number where possible. The private-sale guide covers the broader transaction.
Recognise requests that change the risk
| Request or claim | What to verify | Practical response |
|---|---|---|
| Deposit before any viewing | Vehicle existence and seller authority | Arrange inspection before paying |
| Seller is away and a transport firm will deliver | Seller, car and alleged company independently | Do not rely on the supplied delivery link |
| Funds require a PayID account upgrade | Your own bank, through a trusted channel | Do not send the requested upgrade payment |
| Buyer overpaid and wants a refund elsewhere | Actual account activity and bank advice | Ask your bank to handle the discrepancy |
| Payment goes to a different person | Recipient's role and authority | Pause until the arrangement is verified |
| A report must be purchased from an unfamiliar link | Website operator and actual product | Choose your own verification source |
Scamwatch's buying-and-selling guidance identifies advance payments, unexpected recipients and overpayment requests as warning signs. The useful response is independent verification, not accepting an explanation because the other party sounds helpful.
Understand PayID without treating it as a guarantee
PayID is a way of addressing a bank payment. Use it through your own banking app or website, check the displayed recipient name and confirm any mismatch before sending money.
Australian Payments Plus says PayID will never contact you directly to request money or an account upgrade. It also notes that some payments can be held for security checks. A delay is therefore a reason to ask your bank, not a reason to release a car based on a screenshot.
An illustrative seller receives an email saying a buyer's payment exceeds their account limit and will be released after an upgrade fee. The seller opens their own banking app rather than the email link, sees no incoming funds and contacts the bank through a trusted channel. They keep the car and keys while the claim is checked.
Plan a handover that protects both parties
Buyers should arrange an independent inspection and resolve any security or written-off findings before settlement. Sellers should know how they will verify receipt of funds and provide a proper receipt and transfer documents.
Agree the payment method, bank limits, likely timing and recipient before handover. Do not improvise because someone arrives late, sends a courier or changes account details. Ask your bank how to handle uncertainty; no general promise that a payment is “instant” replaces the bank's confirmation.
A useful handover checklist is:
- The actual car, VIN and sale documents agree.
- Seller identity and authority have been checked.
- Material history and inspection questions are resolved.
- Recipient details match the verified agreement.
- Each party independently checks their own banking information.
- Keys, receipt and registration paperwork follow the agreed process.
Act promptly if money or information is lost
Stop sending funds, even if the other party offers a refund after another fee. Contact your bank immediately and preserve the original advertisement, profile, messages, URLs, account details and transaction records.
Use the platform's reporting tools and the official channels in Scamwatch's recovery guidance. If identity documents or account access were exposed, ask about the appropriate protective steps as well. Be wary of anyone promising recovery in exchange for another advance payment.
These checks cannot promise that every scam will be detected. They create clear points at which a buyer or seller can pause, verify and keep control of the transaction.
Frequently asked questions
Does a clean PPSR result prove an online advertisement is genuine?
No. A scammer can copy a real vehicle's VIN and photographs. You still need to establish that the vehicle exists, inspect its physical identity and verify the seller's authority.
Do I need to pay to upgrade PayID before receiving money?
No. Australian Payments Plus says PayID will not contact you directly or ask you to send money to receive money or upgrade your account. Check any payment issue through your own bank.
What should I do after sending money to a suspected scammer?
Contact your bank immediately, stop further payments and preserve the advertisement, messages and payment details. Report the activity through the platform and the appropriate official reporting channels.