Seller Account Security on a Marketplace

Seller account security means protecting access to the seller account through which your money, stock and every operation flow. Losing access (a hack, phishing, a leaked password, an employee walking off with it) is more dangerous than any fine: an attacker changes the payout details, dumps your stock at a loss or deletes cards. The baseline defense is two-factor authentication, separate access rights for employees and password hygiene. It is cheaper and more important than it seems while everything still works.

In short: account security = 2FA + separate access for employees + password hygiene. Losing the account is worse than taking a fine.

• Phishing — fake "support" emails and websites that steal your login and password.
• A weak or shared password — one password for everyone, passed around in chat.
• Unmanaged access — former employees still have a way in.
• Payout details substitution — the attacker's first target after logging in.

• Turn on two-factor authentication (2FA) for the seller account and for the linked email and phone.
• Give employees separate accounts with minimum rights, and revoke them when someone leaves.
• Never enter credentials via links from emails — log in only from the official address.
• Keep an eye on payout details: a sudden change is a reason to raise the alarm.

Related guides: in-house manager or agency.

"How do I protect a seller account from being hacked?" Turn on two-factor authentication, give employees separate accounts with minimum rights, never follow links from emails, and keep watch over your payout details.

"What should I do if the account has been hacked?" Change the password and restore 2FA immediately, check and restore the payout details, revoke third-party access and report the compromise to platform support.

"Why do employees need separate accounts?" To limit each person's rights and revoke access quickly when they leave. One shared password for everyone is a common cause of leaks and account takeovers.

"Why is phishing dangerous for a seller?" Fake "support" emails and websites steal your login and password. Once inside, the attacker changes the payout details and controls your stock, which is why credentials must never be entered via links from emails.