Two photos. That's all the seller had posted on Facebook, the same file image of a mid-century dresser cropped two different ways, on a profile that hadn't existed a full week yet. I didn't know any of that when I first messaged him about buying it. I only found it out after running his phone number, by which point he'd already asked me to read him back a six-digit code.
Backstory: three years past my divorce, I'm a bookkeeper who spends her days making sure numbers balance, and I've carried that habit into how I check out strangers, whether it's a Hinge date, a contractor, or whoever's selling furniture on Facebook Marketplace. A reverse phone lookup is the first thing I run before trusting anyone I haven't met in person, since a phone number is one of the few details a scammer can't fake without leaving some kind of trace. I keep a Notion doc logging what Spokeo, TruthFinder, and PeopleFinders each get right, get wrong, or just don't have, and this Marketplace listing earned its own line in it.
The dresser had the tapered legs I'd been hunting for, priced low enough to make me suspicious but not so low I'd walk away. Messaging the seller, whose profile said Michael Torres, went fine until I asked about dimensions, and the tone shifted fast. He wanted my cell number first, framed as a safety step, which is exactly the kind of framing that makes my bookkeeper brain start hunting for the error in the ledger. Before opening any lookup tool, I tried the free version and just Googled his name. Three different men named Michael Torres turned up in Phoenix alone, none obviously him, which told me nothing except that searching a common name gets you nowhere.
What a Reverse Phone Lookup Actually Showed Me
So I asked for his number instead of handing over mine, and he sent a standard ten-digit line with a 480 area code, local enough to pass for someone just down the road in Gilbert. Running it through Spokeo took close to a minute, long enough to tell me it was pulling from something real instead of guessing. What came back wasn't a Mesa resident with a property record. It was a non-fixed VOIP line, registered to a carrier I didn't recognize, with a couple of high-risk flags already left by other users who'd been burned. He'd left a voicemail that same day, and something about its flat, over-enunciated cadence matched three other spam calls I'd gotten that month and waved off without thinking twice. Once the lookup flagged the number, all four calls clicked into place as the same script.
How This Marketplace Scam Used a Verification Code
A non-fixed VOIP number by itself doesn't mean much. Plenty of small business owners route calls through one to keep a personal line private. On a Marketplace listing, though, it's close to a guarantee something's off, and this seller confirmed it fast: he sent a text saying he'd just sent a code to my phone and asking me to read back the six digits so he'd know I wasn't a bot. That's a Google Voice hijack attempt, not a verification step. Hand over that code and you've just helped a stranger register your real number to a new account he'll use to run this exact scam on somebody else. Twelve weeks of running this same play on every person who's asked me for a number has taught me the boring part: most numbers come back clean. It's the ones that come back empty, or too clean, that are worth the extra five minutes.
Can a Clean Result Still Be Wrong?
Not every red flag looks dirty, which is the part most safety guides skip. I once ran a contractor's number before a kitchen quote and got back a lovely-sounding woman in her sixties who'd apparently held that line for two decades. I nearly hired him before it hit me the record was just outdated. He'd likely bought a recycled digital line that still carried her name in whatever database Spokeo was pulling from. I've got a separate file on how far behind these services can fall when a number changes hands, and that's its own mess for another time. This wasn't that kind of stale, it was closer to a costume. If a number has supposedly sat at one address for twenty years but the man on the phone sounds twenty-five, trust the discrepancy over the database.
Checking the Story Beyond the Phone Number
A phone lookup is only the first lock on the door. If the number doesn't match the story, I stop right there, no seller, no date, no babysitter candidate gets past that stage without an explanation. If the number checks out, I move to whether the name shows up on a live, aged social media profile, the same cross-check I lean on for how to find truthful dating profiles using a phone number search. My friend Deja, who I matched with on Hinge before we settled into being the kind of friends who just trade DMs now, texted me last week asking why I bother with any of this for furniture. She's the one who first showed me that most people have no real idea what an address history chain even shows once somebody pulls it, which is a big part of why this whole routine exists.
None of this is the same job as an actual background check on a roommate, where FCRA permissible-use rules dictate what you're even allowed to request and why, and it isn't the deep pull that maps a full address history or hunts a name through court records across different county jurisdictions either. It's closer to a first pass, the kind of thing I also walked through in my system for vetting babysitters after months of trial and error: you're not building the full public-record file a real background check would return, you're just checking whether the story matches the number, and whether anyone real backs it up online. Scrubbing your own name off those same people-search sites is a different rabbit hole entirely, and not one worth opening here.
Back to the dresser: when I searched the name he'd given me on Facebook, the account matched what the lookup had already hinted at, thin, new, propped up just enough to look real. Five small inconsistencies like that don't read as five typos to a bookkeeper. They read as one fraud.
A Routine for Every Marketplace Stranger
If you're going to buy or sell anything online, you need an actual routine, not a gut feeling. Never give your own number first. Ask for theirs, and if they won't hand it over, the conversation is already finished. Treat any VOIP flag, especially one tied to an unfamiliar carrier, as a reason to slow down rather than panic, since it isn't automatically a scam but it's never nothing either. Compare the name on the phone record against the name on the listing, and if they don't match, ask why before you ask anything else. No legitimate seller ever needs a six-digit code read back to them to prove you're a real person, and that request alone should end the conversation. For anything that needs an in-person handoff, I only agree to meet in the parking lot at Tempe Marketplace, in daylight, with enough people and cameras around that nobody's trying anything.
I blocked him, reported the listing, and never got the dresser, which stings less than a hijacked Google account would have. I added his number to the Scam and VOIP tab in my Notion doc and noted that Spokeo, for all its minute of hedging, had actually caught the carrier risk without ever producing a name. The lesson that's outlasted this one scam story: a phone number is a fact you can check, and a good story is not. Check the fact first, every time, before the story talks you out of it.