Safety & Protection

Car marketplaces have a scam problem, so we built the gate before we built the listings. This page explains exactly how WhipLister verifies sellers, what we check on every listing, the red flags to watch for anywhere (including here), and what to do if something feels wrong. Straight up: verification makes scams much harder — it is not a guarantee. Your own checks still matter, and this page shows you how to run them.

How listing control works — email links, no accounts

There are no WhipLister accounts. A listing publishes only after these pass, and the seller controls it through links sent to their email. The listing itself then shows what was checked and when, so you don't have to take our word for it:

• Email publish link. The seller submits the listing, we email a publish link, and the listing goes live only when they click it. The same email later receives edit, remove, and renew links on request.
• One listing per email. One verified email = one live listing at a time. It's how we keep the lot clean — a scammer can't spin up fifty listings from one address.
• VIN validation + duplicate detection. The car's VIN is decoded and screened — it must match the car described, and the same VIN can't appear in two live listings.
• Automatic scam screening. Before publication, every listing is screened for price outliers, duplicate or stolen photos and text, and contact-bait patterns (off-platform payment lures, "text this number" traps). Detected scam posts are removed and the email behind them is blocked.
• Protected forms. Listing, manage, contact, and report forms run behind Cloudflare with invisible Turnstile bot checks and rate limits. Turnstile challenges only when risk signals fire; client-side checks are for speed, and server-side validation is the real gate.
• Report on every listing. Every listing carries a Report button. Reports go to a human review queue.

Government-ID checks are planned for a later phase — they are not part of listing today, and we won't pretend otherwise. Screening makes scams much harder; it is not a guarantee.

Buying safely — your checklist

• Keep messages on WhipLister until you've met. Moving to text or email early is how scammers leave the safety net.
• Run the VIN check on the listing page before traveling or paying anything — title brands, liens, odometer rollbacks, theft records. What a VIN check reveals →
• Meet in a public place in daylight — many police stations have safe-exchange zones. Bring a friend.
• See the title. The name on the title should match the seller's ID. No title, liens unexplained, or a title in someone else's name = walk away.
• Get a pre-purchase inspection from an independent mechanic before money changes hands. A seller who refuses is telling you something.
• Pay in person, traceably. Cashier's check verified at the issuing bank, or a bank transfer at the bank. Never wires, gift cards, or crypto to a stranger.
• Trust the deal check, question outliers. A price far below the WhipLister median needs a real explanation — "I'm deploying overseas, pay my shipper" isn't one.

Selling safely — your checklist

• Meet buyers in public, bring a friend for test drives, and hold the buyer's license and insurance proof before handing over keys.
• Verify funds at the bank. Cashier's checks can be forged — complete the sale at the buyer's bank where the check is drawn, or yours.
• Keep your info yours. Buyers need the car and the title, not your home address, banking logins, or a photo of your ID.
• Complete the paperwork: signed title, bill of sale, and your state's release-of-liability form. Remove your plates if your state requires it.
• Mark it sold on WhipLister the same day — the listing comes down and the calls stop.

Scam gallery — red flags we've seen

• The escrow cosplay: "Pay my trusted shipping/escrow company, they'll hold the money." There is no car. Real sellers never route payment through a mystery third party.
• The too-cheap clone: photos copied from a real listing, price slashed 40%, seller "out of state." Our photo and VIN screening hunts these before they publish.
• The code trick: "I'll send you a code to prove you're real — read it back." That code resets your account. Never share codes with anyone, including "support."
• The overpayment check: a cashier's check for more than the price, with a request to refund the difference. The check bounces; your refund doesn't.
• The pressure rush: "Three other buyers coming tonight, deposit now sight unseen." Real deals survive an inspection.
• The curbstoner: an unlicensed seller flipping cars with titles in other people's names ("title jumping"). It's illegal in most states — the title must match the seller.

Reporting — and what happens next

Every listing has a Report action. Reports go to a human review queue (protected by the same bot checks as our other forms). We review, and when a listing or seller breaks the rules we remove it — for fraud, permanently, across identity, device, and payment fingerprints. If you believe a crime occurred, also contact your local police and, in the US, report it to the FTC at reportfraud.ftc.gov and the FBI's IC3 at ic3.gov.

Contact: autoboostteam@gmail.com with subject prefix [WhipLister]. See also our Liability & Legal page for what WhipLister is — and isn't — responsible for.