Ebay Alert !!

[Evans, Marv]

Hi Everybody:
Some time back, I posted a thread questioning about ebay sending emails asking for information supposedly to update my status. They asked for credit card numbers, bank account numbers, ATM numbers & PINs, etc. I didn't respond to them, because I had only supplied my VISA number when I registered. I have continued to receive these emails. Recently, I responded to one giving my VISA number, since that was the original info I had given them and thought an update was appropriate because the card's expiration date had recently passed. After that I looked on the Ebay website and decided to start forwarding these email to "spoof@ebay.com". This morning I received a reply saying they did not originate the emails I had forwarded. The emails look very real. I know many of you use Ebay, so don't respond to any Ebay appearing email asking you for update info or saying something like your account will be closed without the info, etc. I may be changing my VISA pretty soon.

[RickM]

Marv,

Even though you're (most likely) not responsible for any CC theft over $50 I would cancel right away. I wouldn't give the satisfaction to the scum that got the number.

And yes, don't respond to any "personal/financial" information inquiry from Ebay...or any "business" on the internet.

[Swank911]

Those emails are getting popular with the punks on the web.

I have received a couple from different accounts I have.

Couple things tipped my off:

When replying, the reply address does not belong to an ebay.com or the domain of the company who supposedly sent the request for update.


When I followed the link supplied in the email it lead to an unsecure site.

When I checked my account status from the real ebay site my balance was zero.

If in doubt, contact customer support via phone.

I recently got a few from the people that host my web sites, I called them and they informed me that I forgot to update them when changing credit cards.

Earthlink and an other site had a page dedicated to stating that emails supposedly coming from them were in fact not.

[RickM]

Originally posted by Swank911
When replying, the reply address does not belong to an ebay.com or the domain of the company who supposedly sent the request for update.

Even if the Email appears to be from Ebay the domain name may not be genuine.

[nostatic]

it is easy to spoof domains and addresses. Don't trust anything you get in an email. Cancel that credit card NOW.

On a related note, I got a letter from UCSD (where I worked in a lab for a summer), saying their admin computers were hacked, and my ssn may have been stolen. They advised me to contact one of the three credit reporting agencies and request a fraud alert. I did so (it is pretty quick and painless...and man, they know *everything* about you), and within 5 days I got complete credit histories from all three (for free). And as an added bonus, for the next year the fraud alert stays in place, and it stops companies from sending me "pre-approved" credit card offers. Horray!

On the plus side, there was no funny activity on my accounts...

[david914]

I get those all the time. I forward them to the "real" ebay so they have more ammo to deal with the @ssholes that pull that kinda crap. Ya know, if we actually started punishing criminals instead of slapping them on the wrist, this kinda thing might not be as prevalent. Don't get me started...

[cyprusx]

NO business will ever solicit this information via email. DO NOT respond to any request from any business that does. Simple policy.

[RickM]

Regarding SSN. I once saw a show where they mentioned 2 or 3 "generic" SS numbers that could legally be used. Anyone know what they are? They're exactly what I'd like to use at a doctors office or similar.

[K. Roman]

I received on of those recently.

Below is the first paragraph in the email, which of cours looks like a real Ebay page layout.



"We are currently performing regular maintenance of our security measures.
Your account has been selected for this maintenance.
Protecting the security of your eBay auction account is our primary concern,
and we apologize for any inconvenience this may cause.
Comments are welcomed!
In order to update your account information, you need to complete the following process!
If not, your account may behave unnormally and errors may occur without notification.
_

Verify your identity

Your personal information will be verified instantly. All the data is protected by the industry standard SSL encryption. All information is required and is kept confidential in accordance with eBay's Privacy Policy. "


Once again, never give out any information, credit cards, SSN's or address to any email you receive.
Period.

[Evans, Marv]

Well, I've already cancelled my VISA and will receive a new one in 7 days. I'm beginning to think it's a good idea to change to a new number periodically. I've had the same account number for years and years. The thing that tripped me up, in addition to the email looking like it came from Ebay, was the fact that my old card had just passed its expiration date, and I thought it was a ligitimate request on the part of Ebay. Just learned a lesson. Anything I receive from now on will be forwarded to Ebay. I agree with David. They need to start prosecuting these people big time and working on an internet way to track them down.

[Pete000]

Keep forwardeing them to the spoofebay and they do stop them. I have reported at least 10 of them already. Hop someday they bust these thiefs.

[trader220]

I got the samething last month and as i started to fill it out I came to the credit card section and decided to contact Ebay. They told me it was a fraud and I forwarded the email to them.

[911nut]

Anything that Ebay will ask you to do will be throught their web site. If the link in the email doesn't take you there then it's a fraud.

[Decolliber]

Originally posted by nostatic
They advised me to contact one of the three credit reporting agencies and request a fraud alert. I did so (it is pretty quick and painless...and man, they know *everything* about you), and within 5 days I got complete credit histories from all three (for free).

They will do this for free? Which credit reproting agencies are these?

[Westy]

Don't want to beat a dead horse, but everyone on this site needs to know this. One of our most recent ID theft scams is to cut and paste a corporations official page, ie Ebay, onto their computer. When they send out the e-mail, it looks official because it is. To check the properties on the page, about halfway down through all the programming mumbo jumbo will be an originating address. It will almost always be from a private subscriber, usually set up in a hotel or motel room or lobby. It's an easy scam, and estimates are upwards of 20% that respond with personal information. This equates to hundreds of millions of dollars. Many of these are run offshore, and there is zero chances of arrest or redemption at this point.

The bottom line is that NO LEGITIMATE COMPNY will EVER ask for personal and financial information in this manner. NEVER respond to unsolicited inquiries as this.

Brian W.

[targa911S]

I got one the other day suposedly from Verizon, saying that my credit card payment did not go through on my monthly dsl payment and that I should update my info. They provided a link to do so. Well I don't have dsl and I don't pay by credit card, but I checked out the link anyway and for sure it was a spoof page. Most web companies that deal with credit cards have an area of customer service now for this very thing. I forwarded the email to Verizon and got a reply from them saying it was not them and they are lookin into it. It's everywhere ..ya gotta be very careful out here with your info.