Depop Drama: How safe are you and your data?

By Hanna McDonough

Since its launch in 2011, Depop has become one of the leading platforms in the clothing resale market, boasting over 18 million registered users. With its Instagram-esque layout and user friendly interface, it’s no surprise that the app has become particularly popular among Gen Z. In fact, it’s estimated that 90% of users are under 26.

In recent years, Depop has been praised for its contribution to sustainable and circular fashion. It has popularised the quick resale of used clothing, and promoted the act of shopping second-hand. Unfortunately, a rise in instances of hacking and harassment on the app has brought about new concerns over the safety of its users.

Depop users - women in particular - are increasingly reporting instances of harassment on the platform, often the receiving of threats, bullying, and inappropriate sexual comments. This type of behaviour has sadly been previously experienced by users of sites like eBay and ASOS Marketplace, but what is perhaps even more worrying is that Depop allows users aged just 13+ to create an account. Unlike Instagram or Facebook, which include features to place messages from unknown users and likely spam accounts into separate folders, Depop’s design means anyone can follow and chat with any user. With rising reports of users being asked for nude photographs and being sent explicit sexual messages on a platform designed to simply buy and sell clothes, it is clear that new measures are needed to protect users from predatory and threatening accounts. 

Depop’s community guidelines state, “we aim to keep the app safe, inclusive and respectful. There's no place for bullying, harassment, body shaming, threatening messages or sexual advances on the app.” Since the creation of the app back in 2011, measures have been introduced to help combat these instances of harassment, with ‘block’ and ‘report’ functions available for users experiencing online abuse. There is however a rising number of users that believe Depop needs to go further in protecting those most vulnerable from predatory, abusive accounts. Many are advocating for a way to escalate reports of suspicious behaviour from the outset, before people fall victim to scammers or abusive users on the app.

Unfortunately, harassment isn’t the only problem faced by Depop users. In the past year, account holders have been subject to instances of scams, with hackers often obtaining control of individuals’ personal accounts, through leaked login details from previous online data breaches. Hackers use automated tools to repeatedly enter leaked passwords to gain access to Depop members’ accounts (which contain their PayPal or bank details). Some fraudsters have begun posting fake product listings, advertising anything from trainers to electrical goods, often using images found online.

Taking control of an existing account with previous sales and good reviews, in this way, means buyers are more likely to fall victim to scammers, resulting in cases where users have lost hundreds of pounds. Another tactic scammers use is to ask buyers to pay directly through PayPal’s friends and family service. This allows them to bypass the 10% charge Depop makes from each transaction, resulting in the victim having very little legal protection when they later discover they have been scammed.  

Depop has been made aware of the surge in scams and harassment occurring on its platform, and with numerous investigations by the likes of BBC News and VICE in 2020 alone, these occurrences are becoming more and more frequent. Users have been assured by Depop that it is always working to ensure users have, “the best experience possible on the platform”. However, some users’ confidence in the app is dwindling, with many taking to twitter to share their experiences of bullying and harassment on the app.

Depop has since confirmed that it will introduce two-factor authentication this year to combat the rise of hacking. This will also remind users to only make in-app purchases to ensure they are protected by Depop and PayPal, should a dispute arise. It is incidents such as those mentioned above that serve as a reminder to regularly update passwords and avoid using the same password for multiple online services. Given the minimum age for a Depop account is 13, Depop advises parents or guardians to regularly monitor accounts of children, and report any suspicious or threatening behaviour, as soon as possible.