eBay email scam warnings! Pay Pal too!!!

[cphilip]

Yea I guess I should put that in the title too... Pay Pal also and I copied one of those up there somewhere...

[Hexis]

Being an email abuse/spam fighting guy I would offer a reminder:

The From: and To: addresses in email mean literally nothing. Both the From: and To: headers are provided from the sending mail server, and there is no way to verify the data. You can not trust either one.

The only thing you can truse is the information added to the recieved headers by your own mail server.

If anyone wants more info about reading email headers PM me, I would be glad to help.

[cphilip]

Got a new one today and its somewhat similar to some of the others. AGAIN DO NOT USE ANY LINKS IT A SCAM!!!

Here is the new one:

Dear eBay customer

During the last time we have been re-writing our security policy
according to our database uppgrades. From now on you will have
to verify your account and your personal information and
confirm that you are the true holder of your account.

All information is kept confidential in accordance with
eBay/Paypals privacy policy, and all the data is protected
by the industry standard SSL encryption.

Click on the link below and follow the instructions:

www.ebay.com/PayPal&eBay/AccountVerification/


IMPORTANT:
Unless you do not verify your account it will be closed,
and you will have to re-register your membership.

[cphilip]

One thing eBay is telling people is you most likely are getting these because your user name is your email address. You are recomended to change that to stop getting these Spoofs. I suppose that would go for your Pay Pal as well.

[GhillieGuy]

damn p-pal emails, iv'e gotten a few of those in the last week and a load of ones from e-bay..

[RSUAVE911]

thanks for the heads up

[madmed]

Thanx for the heads up.

[PyRo]

[rdb123]

Originally posted by Tubby_Ninja
Just curious:

How do they do that http://cgi.ebay.com thing, without going to one of Ebay's servers?

Uhhh, that is an actual eBay site. The "cgi" part is just a subdomain of ebay.com--meaning it is part of ebay itself.

Sorry, I know this thread is old, but you are scaring people off of real emails. If I remember another thread on here stating that those were actually real, and that you just received them because ebay had trouble charging the seller's fee to whatever account info they have on file.

[rdb123]

Originally posted by PyRo
Umm yeah, he is wrong. Don't listen to those e-mails.

Are you kidding me? In another thread a few months ago I think cphillip or someone said that they ended up being true.

You are aware that the cgi part in http://cgi.ebay.com is part of ebay itself? It's a subdomain. If you have any experience web-developing or whatnot, you would know that that is actually a page on ebay's servers.

That's like saying http://sports.yahoo.com is NOT part of Yahoo.

[rdb123]

If you still don't want to listen to me, try this:

1) Goto http://www.ebay.com

2) Look in the main content area for a section called Featured Items -- the words should be in a green box.

3) Place your cursor over one of the links to a featured item and leave it there.

4) Look in the status bar of Internet Explorer and look where that link will lead you to.

You see how it says http://cgi.ebay.com/yadayadayada ? Point proven.

[PyRo]

What are you talking about?

[rdb123]

PyRo: Hehehe. I used to work for RazorFish, a web-development company a year or so ago. I've also done plenty of server maintenance for GameGlow when it was still hosting the www.diablo2.com site. Anyone getting those emails should actually listen to them as long as they have ebay.com somewhere in the URLs.

-Ron

[magking1971]

I got one these from "e-bay" I did not know if it was real or not so I sent it to e-bay and here is what I got back..
Hello,

Thank you for contacting eBay's Trust and Safety Department about email
solicitations that are falsely made to appear to have come from eBay.
These emails, commonly referred to as "spoof" messages, are sent in an
attempt to collect sensitive personal information from recipients who
reply to the message or click on a link to a Web page requesting this
information.

The email you reported did not originate from, nor is it endorsed by,
eBay. We are very concerned about this problem and are working
diligently to address the situation. We are currently investigating the
source of this email to take further action. You may rest assured that
your account standing has not changed and that your listings have not
been affected.

We advise you to be very cautious of email messages that ask you to
submit information such as your credit card number or your email
password. eBay will never ask you for sensitive personal information
such as passwords, bank account or credit card numbers, Personal
Identification Numbers (PINs), or Social Security numbers in an email
itself. If you ever need to provide information to eBay please open a
new Web browser, type www.ebay.com, and click on the "site map" link
located at the top the page to access the eBay page you need.

If you have any doubt about whether an email message is from eBay,
please forward it immediately to [email protected] and do not respond to
it
or click on any of the links in the email message. Please do not change
the subject line or forward the email as an attachment.
.
.
So THANKS cphilip!!!!!

[rdb123]

That message you got back is automated...you could send a perfectly authentic letter and you will still get that back.

This thread will probably cause more problems than it will solve.