Options
Is this real or fake email from Lord knows who?
Update Your Account Information At eBay
Dear eBay Customer, During our regular update and verification of the accounts, we couldn't verify your current information. Either your information has changed or it is incomplete. Please click here update and verify your information in your account. If the account information is not updated to current information within 5 days then, your access to bid or buy on eBay will be restricted.
--------------------------------------------------------------------------------
eBay treats your personal information with the utmost care, and our Privacy Policy is designed to protect you and your information. eBay will never ask their users for personal information, such as bank accounts numbers, credit card numbers, pin numbers, passwords, or Social Security numbers in an email. For more information on how to protect your eBay password and your account, please visit User Account Protection.
This eBay notice was sent to your email based on your eBay account preferences and in accordance with our Privacy Policy. To change your notification preferences, please visit click here. If you would like to receive this email in text format, click here.
Copyright © 2003 eBay Inc. All Rights Reserved.
Designated trademarks and brands are the property of their respective owners.
Dear eBay Customer, During our regular update and verification of the accounts, we couldn't verify your current information. Either your information has changed or it is incomplete. Please click here update and verify your information in your account. If the account information is not updated to current information within 5 days then, your access to bid or buy on eBay will be restricted.
--------------------------------------------------------------------------------
eBay treats your personal information with the utmost care, and our Privacy Policy is designed to protect you and your information. eBay will never ask their users for personal information, such as bank accounts numbers, credit card numbers, pin numbers, passwords, or Social Security numbers in an email. For more information on how to protect your eBay password and your account, please visit User Account Protection.
This eBay notice was sent to your email based on your eBay account preferences and in accordance with our Privacy Policy. To change your notification preferences, please visit click here. If you would like to receive this email in text format, click here.
Copyright © 2003 eBay Inc. All Rights Reserved.
Designated trademarks and brands are the property of their respective owners.
0

Comments
To check if a URL is a spoof or not, please follow this procedure:
1. Click on the link that you get; DO NOT ENTER ANY PERSONAL INFO
2. In the address bar of the browzer, cut and paste the entire line below:
javascript:alert("The true URL is: " + location.protocol + "//" + location.hostname + "/" + "
If this does not match the URL shown in your browser address bar, you are likely to be seeing a web page from a different web site! We recommend that you close you browser and empty your browser cache now.");
3. If the address in the pop-up matches your intended URL, then you are fine, else it is a spoof.
It's a CLUNKER, dump it!...
myEbay
DPOTD 3
Don
Thank you for contacting eBay's Trust and Safety Department about email
solicitations that are falsely made to appear to have come from eBay.
These emails, commonly referred to as "spoof" messages, are sent in an
attempt to collect sensitive personal information from recipients who
reply to the message or click on a link to a Web page requesting this
information.
The email you reported did not originate from, nor is it endorsed by,
eBay. We are very concerned about this problem and are working
diligently to address the situation. We have investigated the source of
this email and have taken appropriate action. You may rest assured that
your account standing has not changed and that your listings have not
been affected.
We advise you to be very cautious of email messages that ask you to
submit information such as your credit card number or your email
password. eBay will never ask you for sensitive personal information
such as passwords, bank account or credit card numbers, Personal
Identification Numbers (PINs), or Social Security numbers in an email
itself. If you ever need to provide information to eBay please open a
new Web browser, type www.ebay.com, and click on the "site map" link
located at the top the page to access the eBay page you need.
If you have any doubt about whether an email message is from eBay,
please forward it immediately to spoof@ebay.com and do not respond to it
or click on any of the links in the email message. Please do not change
the subject line or forward the email as an attachment.
If you entered personal information such as your password, social
security number or credit card numbers into a Website based on a request
from a spoofed email, you need to take immediate action to protect your
identity. We have developed an eBay Help page with valuable information
regarding the steps you should take to protect yourself.
To get to the "Protecting Your Identity" Help page from the eBay site,
please click on the "help" link located at the top of most eBay pages
and select the following topics when the "eBay Help Center" window
appears:
Safe Trading > If Something Goes Wrong > Identity Theft
We encourage you to review additional information about protecting your
identity
<< <i>Ya gotta wonder if anything is ever done about them >>
What can you do about them? People send these emails to arbitrary mass mail email lists. Some percentage of the recipients will have an eBay or Paypal or Bank of America or whatever account. And the ones who don't have an account with the target institution will ignore it (as will hopefully everyone else, too). I work for a large bank and whenever one of these scams targets us, we get as many calls from non-customers as from customers wondering what the mail is.
There are a number of solutions but they all depend on user eduction---how many of you know, for example, where the following URL will go (I think I am correctly remembering the syntax these scammers use):
http://www.ebay.com/cgi/abcdef/xyz?asdfafa=123&fasfs=2313df:sdfsrgblvgtpd34re$ew4$r[gt@//www.scam.com?asdweefef4tb=efe
The answer is: it goes to www.scam.com with everything in front of the ':' treated as a user name and everything between the ':' and the '@' treated as a password---they aren't used as a user name and password but as a decoy to make an unsuspecting user think they are at eBay!
The solution is user education! If in doubt on any page that asks for sensitive information. look at the security certificate (click file then properties then 'security certificates'. You should recognize the server name and the owner name as the company you are doing business with. These are pretty hard to spoof because the certificate authroties (such as Verisign) stake their reputation (and their survival) on only issuing certs once a business has properly identified itself.
Some have pushed Microsoft to display the cert owner in the bottom status bar of the browser, but nothing has been done By Microsoft. My employer is considering offering our customers a downloadable browser toolbar utility that will look for anything that says it is us and warn the user if, in fact, the page is forged it is forged.
But really the best defense is user education (which is why I am putting htis somewhat inappropriate post on this forum)! Be doubly careful whose web server you are talking to when you enter personal infomration. Make sure you are posting to a secure site (look for the little lock emblem in the status bar), and if there is any doubt, check the certificate owner. Don't EVER post financial information to a non-secure website, not send it via email --- email is normally insecure and frequently left lying around for a period of time in the log files of intermediate relay systems at your ISP, the recipients ISP and possibly one or more points in between. These log files are rarely safeguarded in the ways you would expect things like credit card numbers to be safeguarded, so don't put your credit card information in them!
It's unfortunate that we have to treat everything with suspicion, but such is the world we live in these days.
Pete
<< <i>What came uo is basically the this page cannot be displayed deal om the top it did hae something to do wih an authentic looking eBay URL (I suppose that's what you're referrinto -the same thing you copy to paste a lnk)At the bottom of my monitor it said server cannot be found! Even after I attemted a hard refresh! >>
Yes, u are correct. Spoofed URLs often do not stay online for a long time, unless the person wants to get caught. Who knows may be someone took action.