We decided to not host any sort of Buy-Sell-Trade community on our hobby instance for this reason. It’s a small community so a lot of people know usernames of people they know and can trust. It’s very easy for a scammer to use someone’s username and say “I’ll sell you that thing! Send me $150!”.
Block lemmy.ml and hexbear to start. I find their users to be quite toxic.