Etsy Seller's Shop Closed and Funds Withheld Over Biometric ID Refusal
Callum, a 32-year-old artist from Nottingham, finds his Etsy shop, YukiArtsStudio, displaying a 'taking a short break' notice, but this is far from voluntary. Etsy, the digital marketplace for independent creators, shuttered his shop earlier this month, and the only path to reinstatement involves submitting government-issued ID and a selfie for biometric scanning through a third-party verification platform.
Panic-Inducing Deadline and Financial Strain
Two weeks ago, Callum was abruptly asked to prove his identity with a looming deadline, which has now passed. 'I was asked for my biometrics with no prior knowledge and with a countdown timer and deadline before they close my shop, to induce panic data submission,' he explains. Etsy states that biometric data—physical and behavioral traits—are used to match a seller's face to their ID, but only with consent. Since Callum has not complied, he can no longer sell his enamel anime and Pokémon-inspired pins on the platform.
This has led to significant financial hardship: 'There is £128 in Etsy funds being withheld, and for a small artist like myself, that's a lot of money,' Callum says. He continues to fulfill orders at a personal loss, emphasizing his reliance on a steady income for stock, expenses, and daily needs. Account records confirm Etsy is 'temporarily holding' £128.33, with only partial funds transferred. Callum notes that other sellers are migrating to alternative platforms due to similar ID checks.
Verification Process and Privacy Concerns
Etsy partners with Persona, a third-party age-verification company, for identity checks. While non-biometric verification via manual review is available, it 'generally takes longer.' In an email exchange, Callum inquired about manual verification by a human, but an Etsy representative responded that all sellers must use Persona to meet legal and regulatory requirements, with no exceptions.
Etsy's policy indicates that selfies and ID images are retained for up to six years after shop closure, with biometric data stored for no more than 12 months unless legally required. However, Callum expresses deep concerns: 'Etsy cannot guarantee their third-party partners will protect our data after several breaches of their infrastructure and known data misuse.'
Security Allegations and Broader Implications
Recent claims by hackers from vmfunc.re allege that Persona's frontend was exposed, with software performing 269 checks on users, including watchlist screenings, and potentially reporting to the U.S. government for issues like money laundering. Data stored includes IP addresses and browser fingerprints. Persona denies any leaks, surveillance, or government feeding, stating no customer data or backend systems were compromised. Following these reports, Discord halted its age-check pilot with Persona.
David Ruiz, a senior privacy advocate at Malwarebytes, comments: 'I understand that Etsy, as a marketplace and a business, must defend against fraud, but I also understand this seller who, reduced to data, wants to be treated whole.' He warns of an increasing 'price for being online,' where even casual interactions may require biometric verification in the future.
Etsy and Persona have been approached for comment. This case highlights growing tensions between marketplace security measures and individual privacy rights in the digital economy.
