Home Trading Cards & Memorabilia Forum

Warning - New eBay Scan to Steal your Password - Tricky

I'm not sure if this has been reported yet but there's a new spoof email going around to steal your eBay password. I've never been fooled by them before but this one's really sneaky. They send an email that matches the emails eBay sends when there's a question from a member. The question was asking what happened to the shipment of their item and if they don't get a response, they'll report you to eBay. I clicked on the "respond" button and it comes up with the log-in screen. I logged in and was taken to an auction for a computer from a different seller. At that moment I realized I had been spoofed and had to change my password for the first time in 6 years on eBay.

Hope you all don't get fooled by it.

Comments

  • WinPitcherWinPitcher Posts: 27,726 ✭✭✭
    never answer any email from ebay

    only use MY EBAY messages are found there.

    Steve D
    Good for you.
  • gemintgemint Posts: 6,102 ✭✭✭✭✭
    This is probably what I'll have to do. Although it is, make that 'was', convenient to just reply to the eBay question emails.
  • I get 3-5 emails per day that are scams to look like they're from - paypal, ebay, banks etc.

    I got one of these this morning - mine was from "mika485" - a scam account created today. I don't click the links since it's an obvious scam - several subtle differences. If you right click the link, you can see the real link location - this is the scam link

    "http://messinfo.i8.com/signin.html?jfxkj9skefp%3iglkdjfjUY4FJ4INHIJYjfyI7JFIyjf7jYFKJIFYjyI
    74JFIFJ4IFjfijIJFIyiYFJIjkfoJKykokOJKYojkyoKYFJOyoy4o8kuko8YKOKOjyfiKOFJYioodyjhTYDOKD
    FIiloKIopkfuoiFKukfokYJFIJYkouIUFJIyjfoFIYjofkyuOFYIyfjoiUKFOIyijfykoiOyjiuyjOIYofyjoIYFOIy
    ofiyjkOIFUojyfoiuKYOyjofyoUFOPUKjofoUKIOPFUoyfyKOFIKUofyi"

    certainly not an ebay domain
  • HoofHeartedHoofHearted Posts: 2,537 ✭✭
    Good catch Gemint! Thanks for the heads up. The scammers get more clever every day...

    hh
  • kuhlmannkuhlmann Posts: 3,326 ✭✭
    Man thanks a bunch!! they got me i replyed and all that sh$t! thank god for me i was out of town for a week and i didnt pay my ebay fees so my account is on hold! LOL or i would of been crushed, thanks for the heads up i just changed all my info..
  • AxtellAxtell Posts: 10,037 ✭✭
    It sucks that there must be tons of people who don't take the precautions, and don't know they've been spoofed.

  • jrdolanjrdolan Posts: 2,549 ✭✭
    Another one I received tonight pretended to be from PayPal, telling me a "foreign IP address" had tried to access my account, and if I didn't click on the link and confirm my information my account would be suspended. The whole email was an imbedded image, except for the link. No text at all, so when I forwarded it to spoof@paypal.com, the forward was empty. Further tip-offs: Misspelled words, it addressed me by my email address rather than by name or PayPal ID. And of course the "Internet headers" showed a convoluted path of servers, none of which belonged to PayPal.

    As Axtell said, how many people get their PayPal accounts sucked dry because they simply followed instructions they thought came from PayPal? These scammers must have a constantly shifting set of temporary PayPal accounts that they funnel money into. The money is quickly and frequently withdrawn to a bank. When PayPal makes their first inquiry, the connection to that bank is severed and they abandon that particular PP account. How many millions of dollars are lost this way every year?

    One easy precaution is never keep more than a few bucks in your PayPal account! When you buy, use your credit card or bank account through PP to pay for it. When you sell for any significant amount, withdraw the money right away.

    The other easy rule is to assume ANY email from eBay or PayPal requesting info is a scam. Sign into your account (but not by clicking on the email link) and see if there are any messages for you. Don't even assume an auction notification is legit. How hard can it be for a determined scammer to track when you win an auction (or sell something) and send you a spoof email about it? I go to the auction page and do my business there.

    The phishers and spoofers are getting more clever, therefore so must we.
  • ctsoxfanctsoxfan Posts: 6,246 ✭✭


    << <i>The other easy rule is to assume ANY email from eBay or PayPal requesting info is a scam. >>



    This goes without saying. Just delete any email you get from either source, if it's important - you'll get the same notification when you properly log in to your account anyway. What a shame that the scum that send these endless emails continue on scamming people.
    image
  • I ignore any email I get form "ebay" or "paypal" One time it was legit and my ebay account credit card expired. Ultimately ebay wouldn't allow me to bid after my CC expired. At that time I went to my preferences and updated the credit card and placed my bid a few minutes later. So yea, ignore any and EVERY email from ebay and paypal. It isn't worth the risk.

    GG
  • TheCARDKidTheCARDKid Posts: 1,496
    The Ebay Toolbar goes on your internet browser and alerts you if you're on a fraudulent site.

    Ebay Toolbar

    On AOL, they mark their official mail very clearly when you receive it. I don't think the spoofers can imitate it. You'd think the technology would be there for every email service to provide this.

  • lostdart58lostdart58 Posts: 2,938 ✭✭✭
    I got this one this morning:




    Dear eBay Community Member,

    The bid that you entered for the item ( 3983196115 ) has been cancelled.
    To view the reason provided for the cancellation Click Here

    Regards,
    eBay


    --------------------------------------------------------------------------------


    Copyright © 2005 eBay Inc. All Rights Reserved.
    Designated trademarks and brands are the property of their respective owners.
    eBay and the eBay logo are trademarks of eBay Inc.




    Collector of:Baseball
    1955 Bowman Raw complete with 90% Ex-NR or better

    Now seeking 1949 Eureka Sportstamps...NM condition
    Working on '78 Autographed set now 99.9% complete -
    Working on '89 Topps autoed set now complete


  • I never get any of those emails after 8 years using ebay image
  • I was told by Ebay that they will never ask you to click on a link from an email !! If a message is from Ebay, they will have you open a new browser & direct you to a page from there !! PayPal I assume is the same !! I get these spoof messages regularly & just send them to spoof@ebay.com !! Anytime you are questioning whether an email is from Ebay or PayPal send it to spoof first, they will get back to you usually the same or next day !! One day is not going to make a difference, and its better to be safe !! Also if you click on the email links they possibly can access your credit card & other account numbers !!! Not a good thing !!!
Sign In or Register to comment.