Ebay Email Spoof

[Gentle Ben]

I'm on & off bidding on Ebay, lately I've been on, so I'm getting email messages of outbid, watched items ending & so on, in todays email I get an Ebay message as follows

Dear eBay customer:

We've recently noticed that someone has made [5] suspicious attemps to login
into your online account from this address 72.122.18.131, our security commitment
forces us to block your account temporarily until you verify your identity on our systems

Verify your identity at this form:


https://signin.ebay.com/ws/eBayISAPI.dll?SignIn&ru=http://www.ebay.com/&_trksid=m37



We apologize for the inconvinience this may cause, but security is one of our top goals in eBay Inc.
You have 72 hours to verify the information on our systems, if you do not verify yourself, your account
will be suspended, and have to contact us by phone or fax in order to unlock
your account.

Stupidly, I clock on the link to "verify" and get error message cannot connect , so I tried again, still no luck, then I start thinking, something aint adding up, no user name in the email, the email came in on an account thats not registered with ebay, and then I logged on to my ebay account and just as I suspected, no new messages, so in other words, this email was spoof, I ran AV software and no bad things were detected,s o Im sure I didnt get an infection of any kind, but it just goes to show you, how easily sucked in we are.

Notified ebay and got the auto reply, but assured they will get back to me ont he matter..

The email address attatched to the message was
notification@account-updates.com

 

[S.C. Joe]

Same thing with Pay Pal, you get an E-mail saying thanks for buying "so and so"-like an I-pod for $300. If you didn't order it, please log in now

Thats so they can steal your password.

Always log in to E-bay or Pay Pal yourself, never click on the link they give you.

 

[blueline]

Anytime you receive a suspicious looking email from either ebay or payal, do this. Forward them to the following addresses.

for ebay - send to spoof@ebay.com (or I presume .ca if in Canada)
for paypal - send to spoof@paypal.com

You will receive emails telling you they are investigating the suspicious emails you are reporting then once they figure out that it is fake, you will be notified. But - never click on anything unless you are 100% sure it is legit.

 

[Gentle Ben]

Just make sure that if you tried using your login and password that you go to the REAL eBay and Paypal sites and change your passwords.

I didn't get past clicking on the link in the email, so no log in onfo was given, I ran Av and nothiong shows up so I think Im ok,,
Also , I am very cautious with emails, basically if I don't recognize, I don't open, just goes to show you how easily we can be duped!

 

[alexmst]

I get 2 or 3 of these fake e-mails every week pertaining to Ebay.

Never click on the links they contain.

Log in to your Ebay account and check your inbox. Any legit message will be there. If it isn't there (Ebay inbox), the one you got is fake.

Ebay works fast to shut the linked sites down (thanks to customers who forward the fake messages to spoof@ebay.com as blueline mentioned), which is probably why when you clicked on the link it didn't work. Within hours of a mass mailing the sites have usually be shut down by internet service providers at Ebay's/authorities request (but they steal some identities in those hours they are up, so don't let it be yours).

 

[Gentle Ben]

Reply from Ebay

Hello,

Thanks for forwarding the suspicious email you received.

The email is a spoof, also known as a phishing, email. (That's
"phishing," as in "fishing" for personal information.) It didn't come
from eBay. Our Trust & Safety team is working to disable any websites it
links to.

Remember that you can always check the My Messages section of My eBay to
see if a message from us is legitimate. Copies of any emails we send you
about the status of your account or a change in your account information
will be displayed in My Messages. This is especially helpful since many
spoof emails try to convince you that your account is in jeopardy.

If you've given out personal information in a spoof email or website,
you need to take steps to protect your identity right away. For more
information about what to do, go to:

http://pages.ebay.com/help/confidence/problems-identity-theft.html

If you'd like to learn more about how to spot a spoof email and stay
safe online, go to:

http://pages.ebay.com/help/tutorial/accountprotection/js_tutorial.html

Keep those reports coming -- you're helping protect the global Internet
community! Our Trust & Safety team works closely with Internet Service
Providers to shut down fraudulent sites. We also send your reports to
Web browser companies so that they can develop tools to identify spoof
sites.

Regards,

eBay SafeHarbor
Investigations Team

 

[Papi Chulo]

Stupidly, I clock on the link to "verify" and get error message cannot connect , so I tried again, still no luck, then I start thinking, something aint adding up, no user name in the email, the email came in on an account thats not registered with ebay, and then I logged on to my ebay account and just as I suspected, no new messages, so in other words, this email was spoof, I ran AV software and no bad things were detected,s o Im sure I didnt get an infection of any kind, but it just goes to show you, how easily sucked in we are.

Notified ebay and got the auto reply, but assured they will get back to me ont he matter..

The email address attatched to the message was
notification@account-updates.com

What was the address of the website that you were taken to when you clicked on the link in your email??


https://signin.ebay.com/ws/eBayISAPI...m/&_trksid=m37

 

[Gentle Ben]

What was the address of the website that you were taken to when you clicked on the link in your email??


https://signin.ebay.com/ws/eBayISAPI...m/&_trksid=m37

I didn`t appear to connect, all I got was the typical IE conection error message