Is this a new phishing scheme? It is new to me.

numisma

I received a question regarding an eBay auction that I am currently running. The guy stated that he noticed one of my eBay auctions and claims that he saw the same coin 2 days earlier. He supplied a URL I ran it through Norton and it was listed as fraudulent. The guy who asked is in the U.K.

I logged into eBay in a new window and noticed that the question was in my messages and the URL was included in the message. I tried the same URL in a new window and it was not flagged as fraudulent the second time, however this time it was asking for my country and zip.

This is a new one on me. Have any of you seen this type of phishing method before?

Barndog

I got something similar a few weeks ago. After I deleted it without clicking any links in the message, I remember getting a message a few days later from ebay "warning me" about contact with that now-NARU'd ebay member.

Lakesammman

Got the same question today on a current auction - let me know if your bank account gets drained!

seemyauction

If you have any doubt that the mesage is real send it to spoof@ebay.com



AL

Goldbully

Link please.

dtkk49a

I get 3 or 5 emails like this per week. Never click on any of the links in the email. Like someone else said, forward the email, including the headers to spoof@ebay.com

Lakesammman

What's the worst a person could expect if they DID click?

Barry

I've gotten quite a few of those the last few days. Also had a couple of guys I know ask me if I sent them a second chance offer recently (no!)

numisma

I receive a lot of spoof emails. This one was different than the others. I did report this to eBay via the spoof@ebay.com email address.

ca0100000

Its a phishing scam that forwards you to a malicious site where they can obtain your ebay login id and password.
I have been getting them today from kel125 and sally197134 .

COINB0Y

I've had 7 in the last week from 7 different accounts.

They say exactly the same thing as you stated, except the names change.

Yup, from kel125 and sally197134 today, too.

aficionado

Yep, got the exact same thing. Forwarded to spoof@ebay.com per Ebay's website. You can forward questionable email there. You can also find that address under Ebay's help section.

I didn't go to the link and ebay confirmed it was a fraud.

Here is Ebay's response, it's long, but to protect our fellow board members:

" Our records indicate that you received an email from 'xxxxxxxxxx' through our Contact eBay Member or Ask Seller a Question feature. Please be aware that the email might contain a fraudulent offer to purchase or sell an item outside of eBay. We recommend not responding to the sender because the email might be an attempt to obtain your email address.

If you have already completed a transaction with a person who has asked that you take the transaction outside of eBay or if you are a seller who has already shipped an item to the buyer and the transaction was completed outside of eBay, we suggest you take the following steps:

1. Contact the payment service that you used to make the purchase. If you paid by credit card, most card issuers provide consumer protection in online fraud cases.

2. Please complete the Item Bought Outside of eBay form or the Item Sold Outside of eBay form. To access these forms, go to:

http://pages.ebay.com/help/tp/isgw-fraud-non-ebay.html

Click the "Item Bought Outside of eBay form" or the "Item Sold Outside of eBay form" link. Enter your information in the following page and then click the "Submit" button. The information you provide will allow us to work more effectively with law enforcement in case an investigation occurs.

3. If you were the seller and shipped the item to a fraudulent buyer, contact the shipping carrier that you used because the company may be able to assist you further. If you sent the item through the U.S. Postal Service, file a mail fraud claim. To do so, please visit:

/csg/p?www.usps.com/postalinspectors/fraud/

4. Contact the local law enforcement where you sent your payment or where you sent the item. The authorities where the seller or the buyer lives might be able to provide additional assistance. To find local law enforcement, visit:

/csg/p?www.usacops.com/

To protect your email and your eBay account, we recommend that you follow these safety tips:

- Do *not* respond to the sender either through the eBay system or your email account. An offer to buy or sell an item outside of eBay is against our policies, might be fraudulent, and will not be covered by eBay protection programs.

- If you received what appears to be a Second Chance Offer for an item that you recently bid on, check My Messages to confirm whether the offer is legitimate. Valid Second Chance Offers appear in My Messages with a blue background and a subject stating, “eBay Second Chance Offer for Item...." If you receive a Second Chance Offer directly in your personal email and it is not in My Messages, that means it is not a legitimate offer. If a Second Chance Offer appears in My Messages with a subject line of “Message from eBay Member,” it is not a legitimate Second Chance Offer. Before responding to a Second Chance Offer, make sure it contains both the blue background in My Messages and the subject line of “eBay Second Chance Offer for Item….”

- Never pay for an eBay item using instant cash, wire transfer services such as Western Union or MoneyGram. It’s against the eBay Accepted Payments policy for a seller to request payment using these methods. They are unsafe, especially if you're paying someone whom you don’t know.

Regards, "

RegistryCoin

Mine was from Debbie.

Writersblock

<< <i>What's the worst a person could expect if they DID click? >>


Website could downlaod a virus, trojan, or keylogger to your computer.

291fifth

I received an unusually aggressive email of this nature about a month ago. It claimed there was a dispute involving an item. The message was obviously bogus but was sent four days in a row. I deleted it each time without opening the link.

coinman420

<< <i>I received a question regarding an eBay auction that I am currently running. The guy stated that he noticed one of my eBay auctions and claims that he saw the same coin 2 days earlier. He supplied a URL I ran it through Norton and it was listed as fraudulent. The guy who asked is in the U.K.

I logged into eBay in a new window and noticed that the question was in my messages and the URL was included in the message. I tried the same URL in a new window and it was not flagged as fraudulent the second time, however this time it was asking for my country and zip.

This is a new one on me. Have any of you seen this type of phishing method before? >>




i got one last night saying the same thing, it had a URL that i copied and pasted to a new browser window and the next page asked me for ebay ID and password yeah like i`m going to hand it to him. i just delete these and never give info but i can see a new ebayer getting fooled by this.

numisma

As I stated before, I get a lot of spoof emails, but this was a new technique. I just received a response from one of the eBay robots and they confirmed that it was a phishing scam.

What's the worst a person could expect if they DID click?

It wasn't a "click" type of set-up. This type they ask you to cut-n-paste a URL into your browser. The next screen asks you to log into eBay, but it is really a different site. What would happen if someone did login is that their eBay account would be hijacked. They would have access to all of your personal information, could post scam auctions that use your good name and feedback to fool people, offer second chance offers, etc, etc.

tincup

The scammers keep getting more aggressive. Trust your instincts.... if it don't seem right, just delete. I get my share of these also.

combatmailman

I receive them as well and I just delete them.

Coxe

This is a bit of ingenuity on the part of the scammers. Anyone can contact someone presently running an auction about that auction. That gets things into the My Messages and email, appearing legit. Getting a fraction of those people to go to their mimic site cgi and getting their identities in effect, allows them to not only highjack their accounts but do so to (1) collect the proceeds of genuine, currently running auctions, (2) appear as low risk active accounts, not ones that have no trading history for months/years, and (3) run big scam ones right alongside legit ones. If exploited extensively, I could see this destroying eBay.