Sounds exactly like a common website “significantly cheaper” scam, only on Poshmark slash Etsy slash Amazon, where the seller is provided your contact info in order to ship you things. Did they have a history of completed sales? Did you ask any questions and get a response (or not) before purchasing? Someone always ends up being the first rube at any online marketplaces from a scam seller who hasn’t been reported yet, at least when said marketplaces aren’t doing serious in-person identity verification first, and this time you’re the lucky one.
Google SSO is the promoted way of signing in and it auto assigns your email to the username without any special characters so scammers could just be scraping new accounts and making a best guess at the email.
Sounds exactly like a common website “significantly cheaper” scam, only on Poshmark slash Etsy slash Amazon, where the seller is provided your contact info in order to ship you things. Did they have a history of completed sales? Did you ask any questions and get a response (or not) before purchasing? Someone always ends up being the first rube at any online marketplaces from a scam seller who hasn’t been reported yet, at least when said marketplaces aren’t doing serious in-person identity verification first, and this time you’re the lucky one.
> So the question here is what part of their system is so fundamentally broken that scammers instantly get my email?
Perhaps none. Did the T&Cs permit this disclosure?
Not that I can see offhand. It mentions using your email for correspondence and copyright disputes.
I'd say odds on Poshmark leaking your address to the seller.
The fact you got spam so soon makes me wonder, did you get your goods?
Yikes. I wonder if there's a way to differentiate between the bad-seller and the poshmark-is-compromised case.
There's a third case that I never considered.
Google SSO is the promoted way of signing in and it auto assigns your email to the username without any special characters so scammers could just be scraping new accounts and making a best guess at the email.
Lame.
I'd call that the first case and the second case. Lame indeed.
Sure. Be a seller.