attempted ebay user ID & password "phishing" spoof email scam

Viol8tor

Golden Member
Feb 17, 2003
1,607
0
0
Hi all,
I just wanted to give everyone a heads up. I recently got two emails "from eBay" that look very official that were seeking user id & password info. I even closely checked out the link that was in these emails on the eBay site and they did in fact seem legit. Me being an extremely cautious individual decided to forward them to the "spoof@eBay.com" address, where the very quickly confirmed that these were not legit. Please be aware of this. A good policy to follow is to forward any email from eBay seeking personal info or containing account sensative info to "spoof@eBay.com" before you do anything with it.

Here are the two email messages I got:

#1

***Urgent Fraud Alert Notice***

eBay ID Verification Request
Date: Tue, May 19, 2004


It appears that your account may have been accessed by someone other than you, to make fake bids at eBay.

As a precautionary measure, we temporarily suspended access to your account to prevent any unauthorized activity. Prior to restoring account access to you, we need to take some additional steps to verify your account information and ensure the security of your account. We are required to open an investigation into this matter.

Investigation ID code: 00********
(Please save this Investigation ID Code for your reference.)

To avoid any possible errors that might occur during this process we advise you to check if your account is active and the registration informations are correct by clicking the following link: (taking less than one minute):

https://arribada.eBay.com/saw-cgi/eBayISAPI.dll?VerifyIdInfo

You may or may not be asked for additional verification in the future.

If your account informations are not updated within the next 72 hours, then we will assume this account is fraudulent and will be cancelled. We apologize for this inconvenience, but the purpose of this verification is to ensure that your eBay account has not been fraudulently used and to combat fraud. Verification takes place in 48-72 hours.

Warning: Falsification of information to evade eBay ID Verification Request may result in civil fines and criminal prosecution. eBay cooperates with law enforcement in cases involving potential falsification of information to evade eBay ID Verification Request.

Please Note: The personal information you provide will only be used to help verify your identity as stated in our Privacy Policy .


We appreciate your support and understanding, as we work together to keep eBay a safe place to trade.

Thank you for your attention on this serious matter. We apologize for any delay in resolving this situation.

Regards,

Morris Franklin
eBay SafeHarbor
Investigations Tea


Please do not reply to this e-mail as this is only a notification. Mail sent to this address cannot be answered.



Copyright © 2004 eBay Inc. All Rights Reserved. Designated trademarks and brands are the property of their respective owners. eBay and the eBay logo are trademarks of eBay Inc. eBay is located at 2145 Hamilton avenue, San Jose, CA 95125.


#2
eBay Fraud Mediation Request
Date: Tuesday, May 25, 2004
You have recieved this email because you or someone had used your account to make fake bids at eBay. For security purposes, we are required to open an investigation into this matter.

Fraud Alert ID CODE: 00************
(Please save this Fraud Alert ID Code for your reference.

To avoid any possible errors that might occur during this investigation process we advise you to check if your account is active and the registration informations are correct by clicking the following link:

https://arribada.eBay.com/saw-c gi/eBayISAPI.dll?VerifyIdInfo

You may or may not be asked for additional verification in the future. If your account informations are not updated within the next 48 hours, then we will assume this account is fraudulent and will be cancelled.

We appreciate your support and understanding, as we work together to keep eBay a safe place to trade.

Thank you for your attention on this serious matter. We apologize for any delay in resolving this situation.

Regards,

Morris Franklin
eBay SafeHarbor
Investigations Team
 

punks321

Junior Member
Apr 19, 2003
8
0
0
same thing happend with my friend, he fill out the form cause it look so real. Luckily, he was checking his account and notice some one is using it to sale a car and it was stop right in time.
 

Collije

Senior member
Dec 10, 1999
285
0
0
Folks, word of advice.

Any e-mails that look to be from online organizations/communities that you're a member of (particularly financial institutions, Paypal, EBAY, etc), that provide links for you to logon to your account, just don't do as a default.

Simply launch a separate browser & manually navigate to that site & logon from there.
 

VaG

Golden Member
Sep 2, 2001
1,324
0
0
I'm glad nut jobs don't post this everytime they get one of these emails because it happens EVERYDAY.

How hard is it to understand this statement that is attached to every email "eBay" sends out?

eBay will not ask you for sensitive personal information (such as your password, credit card, bank account numbers, etc.) in an email.

What gave it away? The source showing the wrong domain, "your account informations", or "investigations tea"?
 

carnettb

Junior Member
May 23, 2004
15
0
0
you get these because ebay sells their member list to spammers who then resell the list, ect
This scam has been going on for a long long time.
 

crimson117

Platinum Member
Aug 25, 2001
2,094
0
76
Hi everyonje.

I'm from eBay.

Please be send your eBay passwrods on my PM when receive email about eBay accounts. I will correctify your situation.

Thanks you,
eBay Security Man
 

MechxWarrior

Senior member
Mar 2, 2004
565
0
76
I never get faked "from" addresses emails because of REVERSE DNIS LOOKUP. Every server should do it. Stops 90% of this spam :)
 

InlineFive

Diamond Member
Sep 20, 2003
9,599
2
0
Originally posted by: crimson117
Hi everyonje.

I'm from eBay.

Please be send your eBay passwrods on my PM when receive email about eBay accounts. I will correctify your situation.

Thanks you,
eBay Security Man

Unfortunately we have no proof that we can trust you with our eBay passwords. I personally would contact regular eBay support.
 

RideFree

Diamond Member
Jul 25, 2001
3,433
2
0
Originally posted by: PorBleemo
Originally posted by: crimson117
Hi everyonje.

I'm from eBay.

Please be send your eBay passwrods on my PM when receive email about eBay accounts. I will correctify your situation.

Thanks you,
eBay Security Man

Unfortunately we have no proof that we can trust you with our eBay passwords. I personally would contact regular eBay support.
Are you the only one that did not know that this was tongue-in-cheek?