Back
Safety and Security

A buyer sends a courier link: pause before entering any details – Blog Article in Estonia

Keep an Estonian marketplace sale on track: check unexpected courier links independently and know what to do if a form asks for payment details or PINs.

You agree a price for a second-hand item. The other person then sends a link and says that a courier is waiting, payment is reserved or the parcel will be cancelled unless you act immediately. Before opening a new form, return to the arrangement you actually made: what is being sold, who is arranging delivery and which service you agreed to use.

Separate the sale from the unexpected link

RIA warns that a supposed courier link requesting bank-card details may be a phishing attempt. Omniva separately warns that its couriers do not ask for PIN-based identification by phone.

A familiar logo or a polished message is not enough to establish who operates a page. Nor does a conversation about a real item make every later instruction trustworthy. You can continue discussing collection or delivery without following the link the other person supplied.

Check through a route you choose

  • Open the carrier's official website or app independently, rather than through the chat link.
  • Look for the relevant service instructions there and compare them with the request.
  • If necessary, contact the carrier through contact details on its official site.
  • Check a payment through your own bank's official channel, not a screenshot supplied by the other person.

Keep the question specific: does this service actually require the step being requested for this transaction? Avoid entering details merely to see what happens next. If the explanation changes from delivery to insurance, account activation or a refundable fee, stop and clarify before proceeding.

Keep useful evidence

Save the listing, agreed price, messages and any details of the proposed delivery. Keep them private. When asking the platform or carrier for help, send only what is needed and avoid exposing passwords, PINs or unrelated account information. Do not forward suspicious links to friends as an invitation to test them.

If information has already been entered

Use the bank's official app or contact number promptly if card details may have reached a phishing page. Estonia's Tax and Customs Board advises blocking an exposed card through an official bank channel. Explain what happened accurately, including whether you entered data or approved an operation; do not assume that closing the page reverses a transaction.

A cautious pause does not accuse every buyer of dishonesty. It keeps a routine sale from turning into a different transaction you did not intend. If the arrangement cannot be explained clearly and checked independently, do not continue through that form.

Sources

Cookie settings

Choices last 180 days. We ask again when connected services change materially. Continuing to browse does not mean consent.

Necessary

Sessions, sign-in, basket, form protection and your selected region. Always enabled; optional tracking is not included.

Always enabled
Cookies and AI use

Cookies and AI use

Choices last 180 days. We ask again when connected services change materially. Continuing to browse does not mean consent.

Controller: Kosmetoloog OÜ, registration number 12374007. For data and consent withdrawal enquiries, use Support chat. You may also complain to the Estonian Data Protection Inspectorate, Andmekaitse Inspektsioon (aki.ee).

What is stored

PHPSESSID — until the browser closes; user-session-id — up to 30 days for the basket and request checks; geo — 30 days for the chosen region; token-auth / dashboard-token-auth — for the sign-in period. Temporary sessionStorage may hold the return address after sign-in.

zeppik.viewed.v1.* and zeppik_recent_* — history for up to 180 days with personalization enabled; zeppik.favorites.historyAfter.v1.* and zeppik_history_clear_* — history hiding preferences. Plyr stores player preferences only with personalization enabled.

zeppik_consent_v1 — signed choices and a receipt number for 180 days. A record of the choice, not linked to an account and without IP address, query text or browser fingerprint, is kept on the server for up to 13 months to demonstrate consent.

Connected external trackers

No external analytics or advertising trackers are currently configured.

Maps, payments and delivery contact their providers when you use the relevant feature. Rejecting optional cookies does not prevent processing necessary for a service you request. Service information and terms are shown in the relevant interface.

Withdrawal stops new requests and removes optional cookies accessible to this site. If an external tracker has already loaded, the page will reload — save completed forms first.

Use of AI

The description generator uses the AI service selected by the administrator. The service and text transfer details are shown before you submit a request. GigaChat and free models through OpenRouter are supported. Do not enter personal data, conversations, documents or business secrets. Review the result before use: AI can make mistakes. Cookie consent does not replace confirmation to send text to AI.

Listing recommendations use category, region, publication order and paid promotion; they are not credit decisions. The credit calculator displays a calculation; the lender makes the decision. Contact support to request a review or make a complaint.

Andmekaitse Inspektsioon · Privacy policy

Withdrawal stops new requests and removes optional cookies accessible to this site. If an external tracker has already loaded, the page will reload — save completed forms first.