Ebay Scam?

[HiTek21]

I got an email today saying something about a fraud alert. The link they sent doesn't work (i modified it in case it isn't a fraud)





eBay Safeharbor Department Notice

Fraud Alert ID : 0062XXXX


Dear eBay member,

You have received this email because you or someone else had used your identity to make false purchases on eBay. For security reasons, we are required to open an investigation on this matter. We treat online fraud seriously and all cases which cannot be resolved between eBay and the other involved party are forwarded for further investigations to the proper authorities. To speed up this process, you are required to verify your personal information against the eBay account registration data we have on file by following the link below.

http://scgi.ebay.com/verify_id=ebay&user=0062XXXX

Please save this fraud alert id for your reference.

When submitting sensitive information via the website, your information is protected both online and off-line. When our registration/order form asks users to enter sensitive information (such as credit card number and/or social security number), that information is encrypted and is protected with the best encryption software in the industry - SSL.

Please Note - If your account informations are not updated within the next 72 hours, we will assume this account is fraudulent and it will be suspended. We apologize for this inconvenience, but the purpose of this verification is to ensure that your eBay account has not been fraudulently used and to combat fraud.

We apreciate your support and understading, as we work together to keep eBay a safe place to trade.

Thank you for your patience in this matter.

Regards, Safeharbor Department (Trust and Safety Department)
eBay Inc.

Please do not reply to this e-mail as this is only a notification mail sent to this address and can not be replied to.

Copyright 2004 eBay Inc. All Rights Reserved.
Designated trademarks and brands are the property of their respective owners.
eBay and the eBay logo are trademarks of eBay Inc. which is located on Hamilton Avenue, San Jose, CA 95125

 

[badluck]

this just in.....

The U.S. has landed on the moon!!!

 

[MarklarMarklar]

If an email asks for sensitive information like your credit card #, ssn, or password, it is fraud. Also common to scam emails is bad grammar. The email you received is riddled with it.

 

[Ichinisan]

The URL uses eBay's authentic domain, and it doesn't appear to be spoofing it.

[edit]
You should make sure that you have the latest updates from http://windowsupdate.microsoft.com beacause some phishing scams can even spoof the status bar and the address bar, making it seem like you're on eBay's site, when you're really browsing the scammer's server.

 

[Xionide]

a scam. Ebay will never ask you for that information as they already know it. They are ebay. Plus the scgi thing totally indicates it. plus they never say ebay member they always go by your name. SCAMIDY SCAM SCAM SCAM!

 

[Ichinisan]

Originally posted by: Xionide
...
Plus the scgi thing totally indicates it. plus they never say ebay member they always go by your name. SCAMIDY SCAM SCAM SCAM!

Shut up. Sub-domain's don't mean SH!T.

A phishing scam usually does something like:
www.ebay.com/long-cryptic-garbage-that-uniquely-identifies-this-message-asdflkasjdlfkajsdlkfjasdl;kfjaslkdjfas;lkdjf@24.240.121.60/more-cryptic-stuff/etc

Everything before the '@' is just a username/password for logging-in to a server at the IP address 24.240.121.60

If there is no login syntax, there is no confusion that ebay.com resolves to a legitimate server. Unless eBay's own servers were compromised, you should be safe if you typed in that URL manually.

 

[bernse]

To speed up this process, you are required to verify your personal information against the eBay account registration data we have on file by following the link below.

Yeah. Right.

Scam.

 

[Lithium381]

eBay and the eBay logo are trademarks of eBay Inc. which is located on Hamilton Avenue, San Jose, CA 95125

hah, just about three miles from my house

 

[Nocturnal]

I've been getting a lot of those in my mail box. Some look really authentic however some have multiple grammar errors that would normally not be on an eBay (professional) e-mail. Also, I'd rather let them lock my account or suspend it and then have me call in to their number listed on their website instead of sending anything through e-mail. I know they won't ask for jack crap through e-mail.

 

[MillionaireNextDoor]

Scam.

 

[RobCur]

stock market is just as bad, maybe even worse! A Very BIG SCAM for average sheeps,nuff said :roll:

 

[DrPizza]

Originally posted by: Ichinisan

Originally posted by: Xionide
...
Plus the scgi thing totally indicates it. plus they never say ebay member they always go by your name. SCAMIDY SCAM SCAM SCAM!

Shut up. Sub-domain's don't mean SH!T.

A phishing scam usually does something like:
www.ebay.com/long-cryptic-garbage-that-uniquely-identifies-this-message-asdflkasjdlfkajsdlkfjasdl;kfjaslkdjfas;lkdjf@24.240.121.60/more-cryptic-stuff/etc

Everything before the '@' is just a username/password for logging-in to a server at the IP address 24.240.121.60

If there is no login syntax, there is no confusion that ebay.com resolves to a legitimate server. Unless eBay's own servers were compromised, you should be safe if you typed in that URL manually.

Not necessarily. If someone manages to change your hosts file, which several recent viruses did, then typing in www.ebay.com could still result in going to some scammers site. AFAIK, no one has done this yet.