Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
Home
ArticlesDiving DestinationsLearning Scuba DivingMarine LifeMiscellaneous
Discussion GroupsGeneralScuba EquipmentScuba LocationsAustralian ScubaUK Scuba
DirectoryScuba Clubs

Scuba Forum / Scuba Locations / May 2005

Tip: Looking for answers? Try searching our database.

eBay scam warning.

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Rudy Benner - 17 Apr 2005 23:43 GMT
The return address I use for News Groups is unique. The current one is only
a couple of days old.

The link leads to a page that lets you give them all your credit card data
and other stuff like your social security number.

---------------------------------------------------------------
     Dear eBay Member,
     We recently noticed one or more attempts to log in to your eBay
account from a foreign IP address and we have reasons to believe that your
account was used by a third party without your authorization. If you
recently accessed your account while traveling, the unusual login attempts
may have been initiated by you.

     The login attempt was made from:
     IP address: 172.25.210.66
     ISP Host: cache-66.proxy.aol.com
     By now, we used many techniques to verify the accuracy of the
information our users provide us when they register on the Site. However,
because user verification on the Internet is difficult, eBay cannot and does
not confirm each user's purported identity. Thus, we have established an
offline verification system to help you evaluate with whom you are dealing
with.

           click on the link below, fill the form and then submit as we
will verify

     http://www.ebay.com/aw-cgi/eBayISAPI.dll?VerifyRegistrationShow

     Please save the above link for your reference

     Please Note: - If you choose to ignore our request, you leave us no
choice but to temporarily suspend your account.

     * Please do not respond to this e-mail as your reply will not be
received.

     Respectfully,
     Trust and Safety Department
     eBay Inc.

Signature

Rudy Benner

Never attempt to reason with people who know they are right.

Fish_Nailer - 18 Apr 2005 00:12 GMT
Yeah I just delete these emails, you should forward it to:
"spoof@ebay.com" So they can track it down & take some action.

Signature

Fish_Nailer

Rudy Benner - 18 Apr 2005 00:27 GMT
Yes, did so, also to the police. I suppose some people fall for it.

I will keep it on file for the headers.

> Yeah I just delete these emails, you should forward it to:
> "spoof@ebay.com" So they can track it down & take some action.
Keith - 18 Apr 2005 13:13 GMT
>Yes, did so, also to the police. I suppose some people fall for it.

I wonder just how many fall for it.  A lot is reported nowadays on the
growing problem of ID theft.  I wonder how much of it comes from these
phishing scams.
Todd H. - 18 Apr 2005 18:17 GMT
This class of scam is known as "Phishing"  and it's a big problem that
you'll see reported in the press.

> Yes, did so, also to the police. I suppose some people fall for it.
>
> I will keep it on file for the headers.
>
> > Yeah I just delete these emails, you should forward it to:
> > "spoof@ebay.com" So they can track it down & take some action.

Signature

--
Todd H.  
http://www.toddh.net/

Rudy Benner - 18 Apr 2005 19:57 GMT
Ok, thanks for the clarification, I had heard of it without knowing exactly
what was involved.

> This class of scam is known as "Phishing"  and it's a big problem that
> you'll see reported in the press.
[quoted text clipped - 5 lines]
>> > Yeah I just delete these emails, you should forward it to:
>> > "spoof@ebay.com" So they can track it down & take some action.
Rosalie B. - 18 Apr 2005 00:34 GMT
>The return address I use for News Groups is unique. The current one is only
>a couple of days old.

I don't answer anything from either ebay or paypal especially if they
call me "Dear eBay Member".  They KNOW my name, so if they don't use
it, it isn't eBay.

>The link leads to a page that lets you give them all your credit card data
>and other stuff like your social security number.
[quoted text clipped - 33 lines]
>      Trust and Safety Department
>      eBay Inc.

grandma Rosalie
Rudy Benner - 18 Apr 2005 02:20 GMT
Anything addressed to newsgroups@rudybenner.com automatically is suspect and
goes into its own folder. This is not the address I use for online
transactions, not even the same domain.

Funny how I did not pick up on the "Dear eBay Member" thing. You are right.

Cocoview - April 23 - May 7, 2005.

>>The return address I use for News Groups is unique. The current one is
>>only
[quoted text clipped - 44 lines]
>
> grandma Rosalie
Reef Fish - 19 Apr 2005 04:06 GMT
> ---------------------------------------------------------------
>       Dear eBay Member,
[quoted text clipped - 11 lines]
>       Trust and Safety Department
>       eBay Inc.

I received something similar to the above too, and I ignored it.
But then I noticed my ebay account WAS indeed suspended and I was
not able to access it.  This was the email I got from e-bay:

====================================
From: suspension@ebay.com
Subject: TKO NOTICE: Compromised Accounts - eBay Registration
Suspension - Date: Mon, 04 Apr 2005 23:10:17 PDT

Dear <my ACTUAL e-bay account name> (my email address),

In an effort to protect your eBay account security, we have suspended
your account until such time that it can be safely restored to you. We
have taken this action because your password may have been compromised.
Sometimes this happens when members respond to an email asking for
personal information. Although those emails appear to come from eBay,
they are really sent by people attempting to gain access to your
account. Although we cannot disclose our investigative procedures that
led to this conclusion, please know that we took this action in order
to maintain the safety of your account.

Please change the password that you use on the EMAIL account that you
have registered to your eBay account. Make sure that it is also
different from the password that you use on your eBay account. By doing
this we can ensure that you are the only one that can access any
further communication we may have with you.

Once you have taken steps to secure your email, please contact our Live
Help team for assistance restoring access to your account. You can
reach the Account Theft Live Help team by viewing the page below:

http://pages.ebay.com/help/confidence/ato-livehelp.html

Please be aware that there may be a delay in responses sent by email.
In order to handle your concern as quickly and efficiently as possible,
we encourage you to contact us through Live Help if you are able to do
so.

Regards,
SafeHarbor Department
eBay Inc.
==================================================================

It was then that i found out my account had indeed been suspended.
I went to the Live Help (with large grains of salt) just to find
out what the scoop was.

I did get a PHONE number to call e-bay for the Live Help.

The person wanted me to change both my e-bay password AND the password
of my email account, by giving me a TEMPORARY e-bay password to my
suspended e-bay account to do so.

I did change my e-bay account password, but I refused to change the
password of my email account -- because I've had the same password
for 30 years, and it's so cryptic that nobody could possibly find
his/her way into my e-mail account even if they can SPAM me because
I never block or killfile anyone.  :-)  And of course NOBODY (except
my wife) knows that password.

So, my e-bay account was restored.

Apparently this is what happened.  SOMEONE was TRYING to break
into my e-bay account (and YOURS too), and pretend that he forgot
the password.  e-bay then sent the password to MY EMAIL account --
I did get that email, wondering why I received it since I KNEW
my e-bay password and never requested a reminder.

So, I just ignored it.

Apparently that's how e-bay found out that my account MIGHT have
been compromised because someone was trying to break in.  But I
told e-bay that somebody would NEVER see the email I got from the
REAL e-bay, and so nothing could have been compromised.

So, there is a REAL e-bay sesurity
SafeHarbor Department
eBay Inc.

and apparently a FAKE e-bay Phishing department, the one Rudy got:

>       Trust and Safety Department
>       eBay Inc.

The latter addressed one as

>       Dear eBay Member,

and the REAL e-bay security addressed me as:

Dear <my ACTUAL e-bay account name> (my email address),

Of course the attempted burglar could have found out my
e-bay account name, but I DON'T think my email address was the
one I used for e-bay contacts, EXCEPT by e-bay, and of course
no burglar could gain access to THAT email accout.

Your situation may or may not be like mine.  But my account
WAS SUSPENDED, and restored, by a person (at e-bay) who was
unable to get ANY of my password into, but who was able to
issue me a TEMPORARY e-bay password for me to change my
e-bay password securely, and restored my e-bay access.

-- Bob.
Dan Bracuk - 19 Apr 2005 04:16 GMT
"Reef Fish" <Large_Nassau_Grouper@Yahoo.com> pounded away at his
keyboard resulting in:
:Please change the password that you use on the EMAIL account that you
:have registered to your eBay account. Make sure that it is also
:different from the password that you use on your eBay account.
<snip>
:Regards,
:SafeHarbor Department
[quoted text clipped - 6 lines]
:I did change my e-bay account password, but I refused to change the
:password of my email account -- because

It's none of eBay's business.  I have never eBayed so I have no idea
of the specifics involved.  They don't actually ask for your e-mail
password, do they?

Dan Bracuk
If we don't succeed, we run the risk of failure.
Rosalie B. - 19 Apr 2005 05:22 GMT
>"Reef Fish" <Large_Nassau_Grouper@Yahoo.com> pounded away at his
>keyboard resulting in:
[quoted text clipped - 16 lines]
>of the specifics involved.  They don't actually ask for your e-mail
>password, do they?

No ebay doesn't.  The phisher does though.  You register on ebay with
a name and a password (and it is better if the name you give them is
NOT the same as the name you get email under and it isn't your real
name), and then you also give them the email address that you want
them to respond to you at.  

So now you have this person come along and want to break into your
ebay account because there's bank information in there.  If you
mistakenly respond to the scammer who is phishing for information and
give him the information then it is not only the ebay and bank account
information that is compromised, but also your email address.

So ebay was erring on the side of caution.

I've had a lot of communication from pretend ebay and pretend Paypal,
but I ignore it (especially if it addresses me as Dear ebay member),
and go directly to my account and see that it is not suspended.  Even
if it was suspended, it's not a life threatening situation.

grandma Rosalie
RayC - 19 Apr 2005 05:27 GMT
> It's none of eBay's business.  I have never eBayed so I have no idea
> of the specifics involved.  They don't actually ask for your e-mail
> password, do they?
>
> Dan Bracuk
> If we don't succeed, we run the risk of failure.

No ... but they figure that anyone that can fall for a
phishing expedition to eBay will most likely give out all
kinds of other information as well.

My 72 year old uncle naively answered a Paypal note and then
called me within an hour to ask about it. I immediately had
him go to Paypal, verify that his funds were still there and
change his password.

He then got the ebay phish and called me again saying that
"it looks real!"  I AGAIN had to explain "phishing" to him.

He is a perfect example of why these guys do it.  It is easy
to steal from these people. And a good reason for Ebay to
ask you to change your passwords regularly.

Just my $.02
Signature


Ray Contreras
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Webmonkey for:
http://www.ossystems.com
http://www.bobs-garage.com
http://www.clanwolverine.org
http://www.rayzplace.com

Reef Fish - 19 Apr 2005 07:35 GMT
> :I did change my e-bay account password, but I refused to change the
> :password of my email account -- because
>
> It's none of eBay's business.  I have never eBayed so I have no idea
> of the specifics involved.  They don't actually ask for your e-mail
> password, do they?

No, they didn't ask for either PW, and if they did, they wouldn't
have feeeshed it out of me anyway.  :)

-- Bob.
Dillon Pyron - 20 Apr 2005 20:54 GMT
>> :I did change my e-bay account password, but I refused to change the
>> :password of my email account -- because
[quoted text clipped - 7 lines]
>
>-- Bob.

It's worth noting that many of these phising sites also install
Trojans on your machine to do key logging.

Signature

dillon

Women should be obscene and not absurd.

Sushi Fish - 15 May 2005 01:23 GMT
> and apparently a FAKE e-bay Phishing department, the one Rudy got:
>
[quoted text clipped - 21 lines]
>
> -- Bob.

Look closely at domain name of ebay which is "ebay.com" this domain
name is unique and case sensitive. Fake ebay address is something like
this:

"xxx@eBay.com"   -> note the capital B instead of "xxx@ebay.com"

coincidentally, ebay has "My eBay" button, it resembles "ebay" domain
name.
Dillon Pyron - 15 May 2005 05:42 GMT
>> and apparently a FAKE e-bay Phishing department, the one Rudy got:
>>
[quoted text clipped - 27 lines]
>
>"xxx@eBay.com"   -> note the capital B instead of "xxx@ebay.com"

Huh?  domain names are not case sensitive.

What helps is to have a mail reader that will tell you if the URL
pointed to is actually the same.

Of course, it's best to skip the link and send an email to ebay
directly.

>coincidentally, ebay has "My eBay" button, it resembles "ebay" domain
>name.

Most phishing emails have all of the other links correct.  Including
the one to report phishing.

Signature

dillon

Women should be obscene and not absurd.

 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2009 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.