Depop connects to your bank account through payment processors, not directly, so your bank details stay with your bank—but Depop itself sees transaction data and holds money temporarily

Depop is a peer-to-peer resale app where you buy and sell used clothing. When you link a payment method, Depop doesn't store your actual bank account number or routing number. Instead, it uses Stripe or PayPal as the middleman—the same processors that handle payments for thousands of other apps and websites. Your bank account information stays between you and your bank; Depop sees only that a transaction happened.

That said, Depop does hold your money. When someone buys from you, the payment goes into a Depop wallet first. Depop keeps a percentage as a fee, then you withdraw the rest to your bank account, PayPal, or Depop debit card. During that holding period—usually a few days—Depop has access to the transaction record, even though they don't have your login credentials.

The real risks are not about Depop stealing your bank details. They are about account compromise, payment disputes, and what happens if your Depop account gets hacked or frozen.

Key Takeaways

  • Depop uses Stripe or PayPal to process payments, so your bank account number is never shared directly with Depop.
  • Depop holds your sale proceeds in a wallet before you withdraw them, and you can only withdraw to a linked bank account, PayPal, or their debit card.
  • If your Depop account is hacked, a thief can change the withdrawal method and send your balance to their own bank account.
  • Depop's dispute process favors buyers, so if a buyer claims an item never arrived or was misrepresented, you may lose the sale and the item.
  • Linking a debit card instead of a bank account gives you more control over how much money Depop can access at any moment.

How Depop accesses your bank account

When you add a bank account to Depop, you are giving Depop permission to initiate transfers from your bank to Depop (for purchases) and from Depop to your bank (for withdrawals). This is called ACH authorization—Automated Clearing House, the system that moves money between banks electronically.

Depop does not receive your username, password, or full account number. Instead, you authorize the connection through Stripe or PayPal, which acts as the intermediary. When you withdraw money, Depop sends an ACH instruction to your bank with your routing number and the last four digits of your account. Your bank processes it on its end.

The risk here is not that Depop will drain your account without permission. The risk is that if someone gains access to your Depop account, they can change the linked bank account to their own and withdraw your balance. Depop's security is only as strong as your password and two-factor authentication.

What happens if your Depop account is compromised

If a thief accesses your Depop account, they cannot directly pull money from your bank account. But they can change the withdrawal method to a bank account they control, then transfer your Depop balance to themselves. This is not a bank account hack—it is a Depop account hack—but the result is the same: your money leaves your control.

To prevent this, use a strong, unique password for Depop and enable two-factor authentication in your account settings. Two-factor authentication means that even if someone has your password, they need a code from your phone to log in. Depop supports authentication apps like Google Authenticator or SMS codes.

If you discover unauthorized activity, contact Depop support immediately. They can freeze your account and reverse recent withdrawals if you report them quickly. The longer you wait, the harder it is to recover the money, because the thief may have already withdrawn it to their bank and the funds may have cleared.

Depop's dispute process and buyer protection

Depop's payment protection strongly favors buyers. If a buyer claims an item never arrived, was damaged, or was not as described, they can file a dispute. Depop will investigate, but the burden is on you as the seller to prove you shipped the item and that it arrived in the condition you described.

If the dispute goes against you, Depop reverses the payment—the money comes back out of your Depop wallet. If your wallet balance is zero, you end up owing Depop money, which they will deduct from future sales or charge to your linked payment method. This is rare, but it can happen if you have already withdrawn the funds.

To protect yourself: ship with tracking, take photos of items before packing, and keep receipts. If a buyer disputes a sale, respond to Depop's investigation with proof. Do not withdraw money immediately after a sale; wait at least a week to make sure no dispute is filed.

Debit card versus bank account linking

Depop lets you link either a bank account or a debit card. A debit card is safer for your primary bank account because it limits exposure. If your Depop account is hacked, the thief can only withdraw to the debit card you linked, not to a different bank account they control.

You can also set a daily spending limit on most debit cards through your bank's app, which adds another layer of protection. If Depop tries to withdraw more than your limit, the transaction fails.

The downside is that debit card withdrawals may take longer (3 to 5 business days instead of 1 to 2) and may incur small fees depending on your bank. But for most sellers, the extra security is worth the wait.

Fees and where your money goes

Depop takes a 10% fee on every sale, plus payment processing fees (usually 2.9% plus $0.30 per transaction if you use a card). These fees come out before your money hits your Depop wallet. So if you sell an item for $100, you receive roughly $86 to $87 in your Depop wallet.

When you withdraw that money to your bank account, Depop initiates an ACH transfer. ACH transfers are free, but they take 1 to 2 business days to clear. During that time, the money is in transit—it has left Depop but has not yet arrived at your bank. If Depop's systems fail during this window, your bank and Depop will work together to locate the transfer, but you may experience a delay.

This is not a security risk in the traditional sense, but it is a reason to keep track of your withdrawals and reconcile them against your bank statement. If a withdrawal shows as pending in Depop but never arrives at your bank after 3 business days, contact both Depop and your bank.

Phishing and social engineering risks

The biggest threat to your Depop account is not Depop's security—it is your own. Phishing emails that look like they are from Depop can trick you into entering your password on a fake website. Once a scammer has your password, they own your account.

Never click a link in an email claiming to be from Depop. Instead, open the Depop app directly or go to depop.com in your browser and log in from there. If Depop needs to contact you about account security, they will do so through the app's notification system, not email.

Similarly, do not share your Depop login with anyone, even if they claim to be Depop support. Real Depop staff will never ask for your password.

Frequently Asked Questions

Can Depop charge my bank account without my permission?

No. Depop can only initiate charges that you authorize—for example, when you buy an item or when they take their fee from a sale. They cannot charge your account for anything outside those transactions. However, if you link your bank account and your Depop account is hacked, a thief can change the withdrawal method and send your balance to a different bank account.

What if I dispute a charge from Depop with my bank?

If you file a chargeback with your bank, Depop will likely suspend or close your account. Chargebacks are meant for fraud, not for disputes about items or seller behavior. For those issues, use Depop's built-in dispute system instead. If you believe Depop itself committed fraud, contact your bank, but be aware of the account consequences.

Is it safer to use PayPal with Depop instead of a bank account?

PayPal adds an extra layer between Depop and your bank, so if your Depop account is hacked, the thief can only withdraw to PayPal, not directly to a bank account. You would then have to authorize a transfer from PayPal to your bank. This gives you more time to notice and stop the theft. However, PayPal itself has security risks, so this is only safer if you also secure your PayPal account.

How long does it take for money to reach my bank after I withdraw from Depop?

ACH transfers from Depop to your bank account typically take 1 to 2 business days. Weekends and holidays add extra time. If a withdrawal shows as pending in Depop but does not arrive after 3 business days, contact Depop support with your transaction ID.

Can I use a prepaid card with Depop?

Yes, many prepaid cards work with Depop as long as they support ACH transfers. However, some prepaid cards charge fees for incoming transfers or have daily limits. Check your card's terms before linking it. A prepaid card can be safer than a bank account because it limits the total amount at risk, but it may be less convenient for frequent withdrawals.