By Stefanie Olsen, 5 January 2005 09:05
NEWS
eBay has moved to squelch spoofed email bearing its name by introducing a private mail service.
In recent weeks, the online auctioneer introduced My Messages, a free, personalised in-box for eBay customers that contains communications only sent from eBay. That way, members can be sure to avoid spam in disguise or phishing scams designed to lure people to a fake eBay website in order to capture credit card numbers or other personal information.
Chris Donlay, a spokesman for the online auction company, said: "You'll know that the messages you get from eBay are truly from eBay. This is one way to fight spoof email and phishing."
Phishing is one of the fastest-growing forms of personal fraud in the world. While consumers are the most obvious victims, the damage spreads far wider - hurting companies' finances and reputation and potentially undermining consumer confidence in the safety of ecommerce.
Such scams are a growing headache for companies online, but eBay and its financial payment service PayPal may be among the most targeted because of eBay's brand name and massive marketplace. According to the Anti-Phishing Working Group, Financial institutions and online retailers are also the targets of email scammers.
According to a report from online privacy watchdog Truste, seven out of 10 people who go online have received phishing emails, and 15 per cent of those have been duped into providing personal information.
eBay has been assertive in fighting scam artists. Last year, for example, the company introduced a security feature for its toolbar that can detect when users are visiting a fraudulent eBay website.
Its newest message centre, which is the result of member suggestions, is only in the first phase of development and could eventually incorporate member-to-member communications, Donlay said. Future versions have yet to be decided, he said.
Peter Cassidy, secretary general for the Anti-Phishing Working Group, said eBay may lead a trend in the industry toward privatised email services designed to circumvent fraudulent email. For example, he said, the banking industry has already held talks about building a secure email system for customers. But the financial threat of phishing scams has yet to prove large enough to force the industry's hand, he said.
"I'm not surprised that eBay's doing innovative things because they've been phished for nearly five years," Cassidy said.
eBay began notifying some members of the new message centre over the weekend.
Stefanie Olsen writes for CNET News.com.
Comments
There are 3 comments. Join the discussion
1. Rob
I know these scams are a problem but I don't think introducing "private" mail is the solution as it is taking away the reason for email. So now I have to log into eBay to check that inbox.
If everyone follows suit then we could end up spending a day logging in and out of sites just to check "private" messages. There needs to be another solution other than sending the use of technology backwards.
Digital Certificates anyone :)
2. sood
i completely agree with the prev readers comments but its a good interim measure by ebay. Sadly things like pgp/gnu pgp (which are free for personal use) which you could encrypt and be sure of who the sender is or use of digital hashing etc just hasnt caught on, even though they've been around for yonks. I have the same sort of gripe with financial institutions - i dont really want email from my bank thats not digitally signed or unencrypted as i can't be sure who really sent it or if its been tampered with (eg for pishing)
3. Martel Firing
There already exists a system designed to provide eBay participants with a spam-free experience. It is called UseBestMail eBay Edition. The system can be used by any eBay participant, and because it is unsuited for bulk mail, i.e., spam, it won't work for the pfishers and scanners.