A new phishing wave is currently targeting some of our members. While this scam attempt is not widespread, it is important to take the necessary precautions to avoid having your account compromised.
 
Kijiji is a public platform and the account activation and password reset features are available to everyone. You can ignore any password resets or account registrations not initiated by you, as any Kijiji account must be confirmed before being activated. 

If an account registration or password reset was not initiated by you then it is possible that your email address has been acquired without your consent by someone else and is being used fraudulently.  We suggest that you check if your email address has been acquired using this site: https://haveibeenpwned.com  then scroll down to check for any breaches. We also strongly recommend using a password manager application whenever possible, in order to set unique combinations for each platform you’ve signed up with. 

If you've received an email telling you that your account or inbox is blocked, please do not click on the link, call any phone numbers or provide any information.  Instead, we ask that you please download/save the email as an EML file (not a PDF) and attach to a new email immediately to our Trust and Safety team at phishing@kijiji.ca.
 
Phishing is the attempt to gain sensitive information such as usernames, passwords, and credit card details by masquerading as a trustworthy entity. It often directs users to enter details at a fake website that looks and feels almost identical to the legitimate one. Phishing emails may also contain links to websites that are infected with malware.
 
Please keep in mind that Kijiji will never text you, call you or request private information over email or phone.  Furthermore, all registered users can log into their My Kijiji account and click on the My Orders tab to confirm any payments that went through our system.
 
Rest assured that if you haven't clicked on the link and provided that information, your credit card account will not be compromised.