Is This an Ebay Spoof Email?

dragon

I get an email from Ebay with a question from a UK Ebay member asking me about a shipping charge for an item I have listed. When you click on the item URL it goes right to the Ebay sign in page instead of the item. Since I have no items on Ebay for sale right now, I assume this is a phishing email to get my Ebay password or something, right??

It looked like an official email from Ebay though

here it is:


eBay sent this message to you
Your registered name is included to show this message originated from eBay. Learn more.
Question about Item -- Respond Now
eBay sent this message on behalf of an eBay member via My Messages. Responses sent using email will go to the eBay member directly and will include your email address. Click the Respond Now button below to send your response via My Messages (your email address will not be included).


Question from c4sell
Item: (6436472319)
This message was sent while the listing was active.
barnsley1105 is a potential buyer.

Hello , I have bid on your item , can you please contact me and tell me how much is shipping to zip code 92110 ? Thank you very much for your response
Respond to this question in My Messages.


Item Details


Item number: 6436472319
End date: 29-Oct-05 18:56:12 BST


View item description:
htps://cgi.ebay.co.uk/ws/eBayISAPI.dll?ViewItem&item=6436472319&sspagename=ADME:B:AAQ:UK:1

Thank you for using eBay
http://www.ebay.co.uk/


Marketplace Safety Tip

Always remember to complete your transactions on eBay - it's the safer way to trade.

Is this message an offer to buy your item directly through email without winning the item on eBay? If so, please help make the eBay marketplace safer by reporting it to us. These external transactions may be unsafe and are against eBay policy. Learn more about trading safely.


Is this email inappropriate? Does it breach eBay policy? Help protect the community by reporting it.


Learn how you can protect yourself from spoof (fake) emails at:
https://pages.ebay.co.uk/education/spooftutorial

This eBay notice was sent to you on behalf of another eBay member through the eBay platform and in accordance with our Privacy Policy. If you would like to receive this email in text format, change your notification preferences.

See our Privacy Policy and User Agreement if you have questions about eBay's communication policies.
Privacy Policy: https://pages.ebay.co.uk/help/policies/privacy-policy.html
User Agreement: https://pages.ebay.co.uk/help/policies/user-agreement.html

Copyright © 2005 eBay, Inc. All Rights Reserved.
Designated trademarks and brands are the property of their respective owners.
eBay and the eBay logo are registered trademarks or trademarks of eBay, Inc.

ILikeDimes

looks legit to me.....just see if it's also in your "My Messages" through your account.

BlindedByEgo

I would log into Ebay in a separate browser window and see if the same message is listed under messages in My Ebay.

Also, the login URL should be Ebay's HTTPS - secure server. A spoof will send you to an unidentifiable URL. If you cannot tell the difference, go with #1.

Hoot

The following are completely bogus URLs:

View item description:
htps://cgi.ebay.co.uk/ws/eBayISAPI.dll?ViewItem&item=6436472319&sspagename=ADME:B:AAQ:UK:1

Thank you for using eBay
http://www.ebay.co.uk/

This is classic phishiing. If you have no items up for sale and you get an email like this, it's phishing. Period. I report all of these to: spoof@ebay.com

Expand the header and forward the entire email to the above address.

Hoot

BlindedByEgo

<< <i>The following are completely bogus URLs:

View item description:
htps://cgi.ebay.co.uk/ws/eBayISAPI.dll?ViewItem&item=6436472319&sspagename=ADME:B:AAQ:UK:1

Thank you for using eBay
http://www.ebay.co.uk/

This is classic phishiing. If you have no items up for sale and you get an email like this, it's phishing. Period. I report all of these to: spoof@ebay.com

Expand the header and forward the entire email to the above address.

Hoot >>





I disagree - the hyperlink text can appear normal, and does. What you MUST look at is the true hyperlink browser redirect shown on your status bar. You should always, and I mean ALWAYS have the status bar enabled, and look at it WHENEVER you get ready to click on a hyperlink. If the stated redirect does not match the redirect shown in the status bar, DON'T DO IT.

Sorry for yelling.

Bunker

Its bogus...I have received several lately using the same zipcode. The auction numbers are usally invalid items

Here is one that i recived this morning:

Item: (6436472319)
This message was sent while the listing was active.
barnsley1105 is a potential buyer.



Hello , I have bid on your item , can you please contact me and tell me how much is shipping to zip code 92110 ? Thank you very much for your response

poorguy

I disagree - the hyperlink text can appear normal, and does. What you MUST look at is the true hyperlink browser redirect shown on your status bar. You should always, and I mean ALWAYS have the status bar enabled, and look at it WHENEVER you get ready to click on a hyperlink. If the stated redirect does not match the redirect shown in the status bar, DON'T DO IT.

Absolutely correct.

Mouse over the link and check your status bar to see where the REAL link would direct your browser to.

I frequently get emails from an ebay member name going by jackjack1414 or something like that with the same questions.

Hoot

<< <i>I disagree - the hyperlink text can appear normal, and does. What you MUST look at is the true hyperlink browser redirect shown on your status bar. You should always, and I mean ALWAYS have the status bar enabled, and look at it WHENEVER you get ready to click on a hyperlink. If the stated redirect does not match the redirect shown in the status bar, DON'T DO IT.

Absolutely correct.

Mouse over the link and check your status bar to see where the REAL link would direct your browser to.

I frequently get emails from an ebay member name going by jackjack1414 or something like that with the same questions. >>



I'll disagree with both of you. Forward this one to eBay and they'll tell you it's not legit. I've done it dozens of times for emails with the domail "ebay.co.uk" as shown. Every time, eBay tells me it was a spoof email.

Hoot

Hoot

By the way, you need to expand the header to retrieve proper information about the email's origin, etc.

I forward every spoof email to eBay, and I get anywhere from 20 to 100 per week. Only by forwarding the information with full header to eBay can they take any action to shut the spoof down.

Hoot

Dave99B

My advice:

Never click on a hyperlink within an email in order to get into eBay, even if you think it’s a legit eBay email.

Always use your own browser shortcut to get to eBay, PayPal, whatever, or manually enter the web address.

Dave

CarlWohlforth

Yes, it is a Spoof.

There are more bogus emails and they are getting better than ever. I never click anything in any email.

Dan50

<< <i>There are more bogus emails and they are getting better than ever. I never click anything in any email. >>



I agree, these are bogus and I recieve them constantly. BEWARE

ILikeDimes

I stand corrected...........at least I only said it LOOKS legit. BTW, c4sell doesn't appear when I search "find members".

flaminio

Here's an easy way to tell. The first line of the email says:

<< <i>eBay sent this message to you
Your registered name is included to show this message originated from eBay. Learn more. >>

But look -- even though it says that it does, it does not include your registered name! It's a phish, guaranteed. Report it.

Another way to check is to open a new browser window, manually type "www.ebay.com", and log into your My eBay. Any legitimate message will show up in your My Messages section.

BlindedByEgo

<< <i>

<< <i>I disagree - the hyperlink text can appear normal, and does. What you MUST look at is the true hyperlink browser redirect shown on your status bar. You should always, and I mean ALWAYS have the status bar enabled, and look at it WHENEVER you get ready to click on a hyperlink. If the stated redirect does not match the redirect shown in the status bar, DON'T DO IT.

Absolutely correct.

Mouse over the link and check your status bar to see where the REAL link would direct your browser to.

I frequently get emails from an ebay member name going by jackjack1414 or something like that with the same questions. >>



I'll disagree with both of you. Forward this one to eBay and they'll tell you it's not legit. I've done it dozens of times for emails with the domail "ebay.co.uk" as shown. Every time, eBay tells me it was a spoof email.

Hoot >>



Sorry, Hoot - I wasn't referring to the validity of this particular spoof. I agree with everything you have said here. My point was twofold - first, to use the browser to compare actual vs. stated hyperlinks, and second, to always use the front door into Ebay... I alway recommend reporting these to Ebay security.