By Patrick Gray, 7 October 2003 06:53
NEWS Another email scam is targeting users of eBay, claiming their use of the auction site has been restricted until they update their account information. The email uses an image to display the text: "During our regular update and verification of the accounts, we couldn't verify your current information. Either your information has changed or it is incomplete. As a result, your access to bid or buy on eBay has been restricted. To start using your eBay account fully, please update and verify your information by clicking below :" The image has the appearance of normal email text and links to a site that purports to be an eBay security update. The scammers utilised common tricks to make the fake URL appear legitimate, including using ASCII characters to write the URL and hiding the real address behind an '@' symbol. The page that the email links to asks for eBay user information, credit card details and even the users ATM PIN number. Patrick Gray writes for ZDNet Australia.
Comments
There are 11 comments. Join the discussion
1. anonymous
I received this email immediately after making an eBay registration and a bid. It was addressed to the email account from which I made the registration but I was immediately suspicious because I had asked ebay to register my other (more secure) email address for the account. It looks as if the scam targets incoming requests to the eBay site. I passed the email - which had a hidden numeric IP address - to the Metropolitan Police Fraud squad for action.
2. Alan Terrill
I had two of these today, both sent to my work address, when its my home one that is registered, but what gave it away was the apparent sender of the message -would you believe "Blackest U. Safeguard" and "Participle R. Bulldozer" !
3. anonymous
Oh my goodness! I almost fell for this one. I received the bogus e-mail a week ago and had struggled with myself to decide if I should "update" my info or not. I actually thought that ebay needed to update their information every once in a while. I thought they just naturally did stuff like that to keep information current. Well, I proceeded to click on the bogus link to update my info as they asked. The web site looked authentic and I even checked the source code which built the web site even though I'm not a seasoned web programmer myself. Well, after filling out most of the boxes, the site asked for my PIN number and I got very suspicious. I clicked on the help icon within the site and tried to do a search for PIN but couldn't find anything. Finally, I did a web search using the Yahoo! search engine for "ebay pin number" and that's when this site (silicon.com) came up with this article. I am so glad I read it and promply erased my info from the boxes in the bogus ebay site and closed the window before I sent any of my personal info. I also deleted the scam e-mail. Thanks, silicon.com! I almost made a big mistake. That web site looked so believable.
4. anonymous
I have just been scammed by someone posing as an e-bay member. I placed a bid for a handheld PDA and was then contacted by another e-bay member advising me that they had one exactly the same which they were willing to do a quick sale on. They told me I could verify their details and with several communications I agreed to purchase the device. I carried out a funds transfer through Western Union and was advised that they device was ready to be shipped with UPS. The device has not turned up and the money has been collected. The member told me they were from Britain and was in Italy staying with family. I have now checked out the ebay membership and it turns out that it is registered in the US. Western Union have confirmed that this is quite common where gangs are using peoples accounts to pose as legitimate sellers. Be Aware!
5. John Raymond
those bastards, got me too.
6. C. Brooks
They are at it again. In addtition to the one I received the other day claiming to be from Citibank, I received one today supposedly from Ebay! It said my registration to buy and sell on Ebay would expire unless I verify my personal information. That was the tipoff! I went further and the dropdown, when I opened the link, asked for credit card number & pin # and bank account #, with directions on how to find it in your checkbook! and ATM pin#. If you deal with Ebay, Be Careful info asked for is legit!
I sent the above along to friends
7. frank
Thankfully I didn't fall for it. I first noticed something strange when looking at the URL given in the e-mail:
http://wwwebay.com/
and the actual URL which was an IP number - then I knew for sure. It was definitely confirmed when test-clicking on send to see what happens, it goes straight to the ebay homepage, no confirmation and way too quick to check the info i.e. the data is simply being sent off somewhere
8. anonymous
I received the ebay scam today (5/4/04) asking for pertinent details--I'm not even an ebay customer. My question is, can't they trace these e-mails by the url address and shut them down? Who can I forward this e-mail to so that they can investigate?
9. John D.
I got that ebay email today...
I didn't fall for it, but it was close. These scammers are going to scam the wrong person someday...boy oh boy would I like to get my hands on one of those slimeball pieces of sh*t for 5 minutes. People like them are filth, and should be treated as such.
10. Paul Ryan
Also beware of any email from RODDRA2@yahoo.com
this user has sent me 3 emails inviting me to be an ebay power seller - all I have to do is give him my credit card and account information!!
Also, the email contained very poor spelling and grammar.
eBay will ALWAYS use correct grammar, spelling, and will NEVER ask for a credit card # or account #.
11. anonymous
I received the eBay scam message today, asking me for bank info even my PIN. Gimme a break! Is there any way to track down the guys behind this scam?