eBay email scam warnings! Pay Pal too!!!

[cphilip]

There is a recent rash of emails asking you to verify your credit card account that LOOKS VERY LEGITIMATE. However, when you look at the link it asks for things like your PIN number and SSN. There is no reason to give those sorts of things out. So...DO NOT USE ANY LINKS to update your account information. Allways log in direct to your account and do it that way if you think you need to.

Report these emails to eBay by forwarding them on with header displayed to [email protected]

[SlipknotX556]

Thanks for the heads up phil.

[cphilip]

No prollem...

As we know these happen often realy but one of these latest ones is particularly well done...

[cphilip]

Also be on the watch out for emails requestiong Pay Pal verifications. It's also a scam from what I hear. I go tone of these today also. Do not fill that link out. If you think you need to update anything then go sign into your account directly and do it. But most likely you do not need to change anything. Report these also to [email protected] as they own Pay Pal.

Nothing in either account cannot be accomplished from within the account itself. Links used in these emails appear legitimate but are not. Be carefull. Do Not use any of them.

Note this at the bottom of any eBay communication.

eBay will not request personal data (password, credit card/bank numbers, and so on) in an email. Learn how to protect your account.


ANY EMAIL THAT TELLS YOU THAT YOU HAVE A PROBLEM AND NEED TO FIX IT BY VISITING THE LINK IS A SCARE SCAM. NEVER USE ANY LINK TO DO ANYTHING!!!!!!!!!

[cphilip]

After reporting several of them yesterday I got this back from eBay (yea the real one!)

Here is one of the emails I recieved that I reported. This one has a very legitimate looking page link but it asks for information that should not be asked for. Check it out and see. Its very well done but... The information they ask for? Thats what made me very suspicious and I checked into it first and found others also had gotten it. It's a scam. Trust your instincts on these. If they ask for PIN numbers and such things only you would realy need they are up to something In fact if they email you for anything be suspicious and only do things in your account by going directly there and loggin in and doing it. Here is the email:

Recently we attempted to authorize payment from your credit card we have on file for you, but it was declined.

For security purposes, our system automatically removes credit card information from an account when there is a problem or the card expires.

Please resubmit the credit card, and provide us with new and complete information. To resubmit credit card information via our secure server, click the following link:

http://cgi3.ebay.com/aw-cgi/eBayISAPI.dll?SignIn

This is the quickest and easiest method of getting credit card information to us. Using the secure server will ensure that the credit card will be placed on account within 24 hours.



Copyright 1995-2003 eBay Inc.



All Rights Reserved. Designated trademarks and brands are the property of their respective



Here is eBays reply to my reporting it, which contains some good advice:

Thank you for contacting eBay's Trust & Safety Department about an email you received from an address that includes '@ebay.com' but that may not be an authentic email from eBay. We will investigate this situation
immediately.


Please be advised that there have been cases where people have attempted to gain access to an eBay member's personal information by sending "spoof" emails. Spoof emails intentionally give the false impression that they have been sent by eBay to solicit people to transmit their account information. Based on your inquiry to eBay's Trust and Safety Department, the email you received was likely a spoof.


eBay is very concerned about spoof email and is taking prompt action to address the issue. If you think you may have entered personal information into a spoof site, we advise you to review the information at the web address below, which contains more detailed information about
the following steps:

http://pages.ebay.com/help/confidence/problems-identity-theft.html

1. Change your eBay password and email account password


Periodically changing your password is one of the most effective ways to maintain security on any Web site. If you think there is a possibility of a breach in your account security, we strongly suggest that you begin by changing your password.


2. Forward the email to [email protected]


If you haven't already done so, please forward a copy of the email, (which will include the full header), to [email protected]. Forwarding the email will help us investigate this matter more quickly. Please do not
forward the email as an attachment or alter the subject line in any way. For more information on how to identify a header, please visit:

http://pages.ebay.com/help/basics/information.html

3. Protect your identity


If you entered information such as your social security number or credit
card numbers into a web site that you were directed to via a spoofed
email, you need to take immediate action to protect your identity. The
following web sites have valuable information on the steps you should
take to protect yourself:

eBay Help:

http://pages.ebay.com/help/confidence/problems-identity-theft.html

U.S. Government ID Theft Site:

http://www.consumer.gov/idtheft/victim.htm

BBB ID Theft Site:

http://www.newyork.bbb.org/identitytheft/newscams.html

As we move forward with our investigation, we will contact you if we need further information. In order to dedicate resources to investigating this type of situation, please submit any other questions or concerns through our Help System, which can be accessed by clicking on the Help button at the top of any eBay page.


*Please do not respond to this email as your reply will not be received. If you need to contact us again, please use the eBay Help system.


We appreciate your efforts in helping keep eBay a safe online marketplace.


Regards,

eBay Trust & Safety Team

[cphilip]

After I signed into that to see what it was and looked and backed out, I immediately changed my passwords. On both my eBay and Pay Pal just in case....

Also from Pay Pal is this warning:

Note: When you log in to your PayPal account, be sure that the
website's URL always begins with "https://www.paypal.com/".
The "s" in "https" at the beginning of the URL means you are
logging into a secure page. If the URL does not begin with
https, you are not on a PayPal page.

[cphilip]

You may also wish to read this article:

WAshington Post article on online auction scams

[Tubby_Ninja]

Just curious:

How do they do that http://cgi.ebay.com thing, without going to one of Ebay's servers?

[cphilip]

Well what they do is called Spoofing but I do not know technicaly how they do it. They somehow mask realy what the address is. And somehow present to you the appearance its that real address. Ask some of the geeks here how to do it. This latest one is realy smooth and perfect. They told me today it was indeed a spoof. But it even had you log in and stuff. And thats where they get that much info even if you do not fall for and fill out the other information. If you go into one of these then back out and immediately change your password.

[pbzmag]

There are a few types of spoofing. There are TCP, DNS, and web spoofing. Spoofing is not the acctual attack but a step in the attack. I'm not to knowledgable on spoofing but do read some things about it. Someone who is a network security specialist would have more knowledge. Here is a link about spoofing.

[Star_Base_CGI]

I just got one from "Pay Pal" it asks for your credit card and Pin number.

This one had a send button. You type everything in the mailer page and hit send and it relays it to a the scammer site. I tried to type something LIke youve been busted by the FBI but it only accepts valid email Identitys.

[Infection5]

yall can do it just like when you put link in and then a differnt address. Example http://cgi.ebay.com

[DCWnek14]

thanks for the heads up!

[Jonno06]

im tired

[Riotz]

There's one going around for Paypal too.