Ebay Alert, Fradulent

[ChrisXE]

I just recieved a letter from Ebay about a suspension due to a third party compromising my account. I am clueless what they mean, I have 41 perfect feedback nothing seemed changed. They ask me to update my Credit card information to combat fraud. They said they have strong prove of fraud on my account, I shiped out to everyone and recieved payment from everyone, so I cant see how my account is fraud. Anybody else ever got this? Whats the phone number to get in touch with them, cause there email sucks big time, I never get a reply. Thank you

[daphatty]

Sounds like a fraudulent email to me. Go to their website and get a phone number. Also, DO NOT REPLY TO THAT EMAIL WITH YOUR PERSONAL INFORMATION!

[ex0]

Yes, that sounds like they want you to change to a different credit card number that the scammer can steal. Definately a scam.

[defender]

That's the scam. To say your account got scammed and then you enter in the info. If you check the link in the email I bet it's an IP address and if you click it you will got to some site that's exactly like ebay and even has all ebay links. But the link is to their page and the form will take your info and give it to them.

[scdoanintendo]

Phone # to contact them should be on ebay.com under help/contact.Someone could of got your numbers and tried to use them to purchase something big. But make sure you contact ebay themselves via phone #, don't send information via email. Better to be safe than sorry.

[suprsaiyanMAX]

Yeah I agree with Daphatty...I think I even saw this same scam on the news a little while ago. They send a bogus email posing as ebay saying you're in debt or have been defrauded, but if you really send them your credit info you'll end up in some real debt and possibly ruined a credit rating.

[ChrisXE]

shyt, damn scammers, thanks guys for all teh help, yea it had a link in their and looked exactly like ebay

[Cornfedwb]

NO major internet company will ever send you an email looking for private information. Anytime you receive an e-mail like this.. it's a scam. Delete it, do not click on any link, do not send any reply, do not pass go, do not collect $200 dollars.

[ChrisXE]

I looked at the hyoperlink they want me to click, and its not a IP, its basically what it always looks like

[PsyClerk]

Phishing schemes are on the rise lately. Either someone needs a lot of money or they've decided to take the shotgun approach.

[ChrisXE]

I cant find ebay number, it must be buried somewhere on that site, can someone lend a helping hand pleas

my CC dont expire for a few more years

[Cornfedwb]

Don't worry about calling them.. just delete and ignore the email. Trust us.. it's just pure scam.

[defender]

The link LOOKS like an ebay but most likely you have HTML for email. If you look at the source you will see an IP address most likely or at least a NON-ebay TLD extension.


And yeah..just ignore the email.

[defender]

Also it's best now to contact ebay with the LIVE help which I think you can link to from the front page.

[ChrisXE]

You guys have to be the best support their is on the net, why dident i ask you guys first, I already replied throuhg the hyperlink, damn Im stupid, anybody got that number. I just want to know did I commit suicide by entering my CC info, ohh my card has internet fraud protection, I dont have Crdit rating yet.

Anybody got that numbeR?

[Cornfedwb]

Uhmm. that's bad. You need to call your CC company and notify them of what happened. Tell them you realized you fell victim to a phishing scam online and gave your CC info out.

You need to cancel the card and have them re-issue you a new number.

[Tromack]

Call up your credit card company immediately and cancel your card.

[ChrisXE]

I got a reply from ebay, and they told me that email dident originate from ebay nor edorse. I am in the process of canceling my CC right now. Thanks a bunch for the help :)

Only if the fraud people knew I was a Cheapassgamer LOL

[starman9000]

Its a definate scam. I got the same thing. Next time you get something like that just do a google search with the subject and you should get plenty of sites detailing the scam.

[bradr]

Watch out for credit card ones, too. I received one from "Fleet Bank" the other day. I don't even have an account with them. It did look very professional, though. No misspellings!

[jedi_dad]

I got the same email last week. I didn't enter any information on the link, but I did go to the link in the email. When I saw they wanted my debit card PIN, I left. Did I compromise anything by entering the site off the email?

[BigDirty]

Also forward the ebay ones to spoof@ebay.com (paypal ones to spoof@paypal.com). They supposively have a "task force" set out to catch the phishers.

[bradr]

I got the same email last week. I didn't enter any information on the link, but I did go to the link in the email. When I saw they wanted my debit card PIN, I left. Did I compromise anything by entering the site off the email?

I think some links can contain viruses that takes advantage of some security hole in Explorer or Outlook (not certain). If you're fairly well updated (www.windowsupdate.com) - that is, if you even run Windows, you should be OK. The only other thing is that clicking on a link on spam email will just let the spammers know that it's a live email account and someone's reading it (if they have that code in place).

[GameDude]

can you post the link? I'd like to see the website.

[bignick]

forward it to spoof@ebay.com

[Squirms]

Make sure that you also change your Ebay password. If you gave that out then they can also hijack your account.

[Misty Dawn]

A tip about any site wanting Credit Card verification or updates during a purchase, if it's legitimate, (like KB Toys for example) they WILL provide you with partial info, like visa expiring 3/05 and the last 4 digits.. This serves as proof that they have your card on file and just want varification that it is actually you.

[MauMauProductions]

I suggest not sending anything. Usually this is to get personal information from you to a 3rd party holder.

[cwick321]

I've gotten about ten of those e-mails over the past two months it is really annoying. I almost filled one outn the first time, but decided to alert ebay and was told it was fraudulent.

[bradr]

I've even received the email from the Nigerian lawyer that wanted me to help him "honestly" steal money. That's my favorite one.

[thatstoobad]

i got that email as well (just now, since i haven't been on the computer for a while) and i want to point out something:

"You have received this email because we have strong reason to believe that your eBay account had been recently compromised used by a third party without your authorization. In order to prevent any fraudulent activity from occurring we are required to open an investigation into this matter. To speed up this process, you are required to verify your eBay infos by following the link below."

read the part i made big. if you notice, it makes no sense. usually ebay's sentences make sense.

"We apreciate your support and understading, as we work together to keep eBay a safe place to trade."

those words are spelled incorrectly. ebay emails don't contain incorrectly spelled words.

i will admit that i clicked on the link without thinking, and then i was quite worried because i thought i may have downloaded something bad. however, i didn't. but yeah, that's definitely not an ebay email. i can't believe you actually gave out your credit card number, but at least you realized it before damage could be done (hopefully).

[ChrisXE]

Yep I canceled probably within 5 mins, I ask for any recent activity on my card, and they said the last thing was a purchase at toys r us(wherer i work), so nothing took place on my card, thanks for the heads up guys

[bignick]

You really have to watch out for the paypal ones, I have gotten about 5 in the last day, it looks just like the paypal site, most people couldnt tell teh difference. Tehn you view the souce and see that is is sending info to a site other than paypal.

[daphatty]

I received one from lucas arts. Except the site they were using was www.lucas-arts.info. My dumb ass actually clicked the link.

[bradr]

I received one from lucas arts. Except the site they were using was www.lucas-arts.info. My dumb ass actually clicked the link.


What was it about? And how'd they go about trying to get your info? Not trying to be a smartass, just curious how someone can make it plausible to give your info out to LucasArts?

[daphatty]

I have no idea really. I think it was some sort of email harvesting program. I wonder if I still have it somewhere...

[Explosion]

this is a classic example of phishing. phishing is basically when some moron (claiming to be from some company) decides to send an e-mail that gets you to give personal information such as a credit card. NEVER give into these

just forward the message (headers and all) to spoof@ebay.com

[rcannon]

Thanks for the email address for Ebay. I got the same thing, but it was on my hotmail account, and I don't use that for Ebay, so I knew this wasn't legit. The other thing that I found funny about it was the email was sent to USA and not my email address. Hmmm!

[bignick]

I received one from lucas arts. Except the site they were using was www.lucas-arts.info. My dumb ass actually clicked the link.

Just by opening them email, they could know your email address is valid. They could be getting a picture from their website with a unique identifer in it. Thats why I like Outlook 2003, it does not automatically download pictures in emails.

[wubb]

Thought it would be good to bump this post as I just received my first phishing e-mail trying to get my eBay credentials yesterday.

These things look so good it's scary. Remember never click on a link from an e-mail and then login to your eBay account from the page you arrive at!

link even had the http://scgi-ebay.... (which is legit) but when I hovered over it I saw it was actually http://69.102.someip.../etcetc SCAM!!!! I forwarded it on to spoof@ebay.com

Here's a copy in case anyone is interested in the exact text:


eBay Safeharbor Department Notice

Fraud Alert ID : 00626654

Dear eBay member,

You have received this email because you or someone else had used your identity to make false purchases on eBay. For security reasons, we are required to open an investigation on this matter. We treat online fraud seriously and all cases which cannot be resolved between eBay and the other involved party are forwarded for further investigations to the proper authorities. To speed up this process, you are required to verify your personal information against the eBay account registration data we have on file by following the link below.

http://scgi.ebay.com/verify_id=ebay&user=00626654

Please save this fraud alert id for your reference.

When submitting sensitive information via the website, your information is protected both online and off-line. When our registration/order form asks users to enter sensitive information (such as credit card number and/or social security number), that information is encrypted and is protected with the best encryption software in the industry - SSL.
Please Note - If your account informations are not updated within the next 72 hours, we will assume this account is fraudulent and it will be suspended. We apologize for this inconvenience, but the purpose of this verification is to ensure that your eBay account has not been fraudulently used and to combat fraud.

We apreciate your support and understading, as we work together to keep eBay a safe place to trade.

Thank you for your patience in this matter.

Regards, Safeharbor Department (Trust and Safety Department)
eBay Inc.

Please do not reply to this e-mail as this is only a notification mail sent to this address and can not be replied to.

Copyright 2004 eBay Inc. All Rights Reserved.
Designated trademarks and brands are the property of their respective owners.
eBay and the eBay logo are trademarks of eBay Inc. which is located on Hamilton Avenue, San Jose, CA 95125


Notice how the e-mail is preparing and assuring the victim that sensitive info entered on the site (SSN, CC#) will be protected. Yikes.

[cyberlian]

One of my friends responded to some email about a suspended email account (it asked him to provide a credit card number to reactivate it)... anyway the next day he had about $500 of unauthorized charges in his bank account. (places like south africa, and germany)

[Rig]

Ouch. That would be very bad. Thanks to CAG for getting the word out.

[davczar]

Ebay will always contact you using your user ID. Whenever you recieve an email like this forward it to spoof@ebay.com and they will tell you if it is fraudulant. NEVER reply to these. I'm also recieving one from Sun Financial asking for the same info. I don't even have an account with them.