The secondhand clothing platform Vinted is facing criticism in Denmark for demanding passport details, card information and several months of private bank statements before users can withdraw their money.
DR reported on September 2, 2026 that former Conservative member of the Folketing Dina Raabjerg was asked for three months of statements from her private salary account. She described the requirement on the radio program P1 Morgen, according to DR. Raabjerg is an active Vinted user and served as the party’s IT spokesperson until the last general election.
Per DR, Vinted keeps the money if a user refuses to hand over the documents. Raabjerg said a statement from her private account reveals almost everything about her, including whether she takes out quick loans, goes to a psychologist, or pays dues to a religious sect.
Raabjerg reported Vinted to the Danish Data Protection Agency, Datatilsynet, last week. She argued that the information is deeply personal and that GDPR rules should protect it. Datatilsynet confirmed to P1 Morgen that the complaint had been received.
The agency has received four complaints about Vinted in total. All of them are being forwarded to the Lithuanian data protection authority, because Vinted has its headquarters in Lithuania, DR reports.
Vinted points to money laundering rules
Vinted declined an interview with P1 Morgen but answered several questions in writing. The company stated that the practice is not applied to all users and is not linked to the size of their transactions. It described the measure as enhanced customer due diligence, triggered only when certain activity thresholds are reached or specific risk indicators appear.
The company would not say how many customers are asked for bank statements. Asked why the statements are needed, Vinted referred to its obligation to counter possible money laundering. The documents allow it to verify the origin of a customer’s funds and check that activity matches lawful income.
Raabjerg said she sees a difference between verifying income and handing over full account statements. She noted that she trades shares on Nordnet and has never been asked for statements there. She also said Vinted could not tell her why she in particular had been selected.
After DR contacted Vinted, Raabjerg received a reply from the company saying she did not need to send all her account details. She was told she could black out the individual entries. She questioned whether users should need advanced GDPR knowledge to reach a legal department and avoid the requirement.
Vinted has faced regulatory action before. The European Data Protection Board reported in 2024 that the Lithuanian authority fined Vinted UAB 2,385,276 euros, about 18 million kroner, over data handling practices including failure to delete data on users who had deleted their profiles. Vinted launched in Denmark in 2023 and is now available in 26 countries.
