Attempted Fraud - Asking for PayPal infoPosted By Malc Shedden |
It is quite common to receive emails that purport to come from EBAY asking for account information, including id, password, credit card number, expiration date, address etc. I have received several in the last few weeks.
The emails are not from EBAY. They look very realistic, and in some ways they conform to the 'rules' that EBAY states should be used in identifying emails and web links from them - for example, the URL should conform to a specific address. The emails I have received include links that look like secure links to EBAY, but in fact are links to some other site with a form that sucks your information to who knows where.
The information you unwittingly supply by filling out one of these forms can be used to hijack your EBAY account and defraud other innocent EBAY users, using your good feedback to avoid suspicion long enough for a transaction to go through.
Point of fact - my brother recently was interested in a high end canon digital camera - the seller stated that he was a German customs officer selling confiscated goods. (ya right!!) Checking the sellers feedback showed that the same guy had recently bought a coupon to a restaurant in Kansas. Very unlikely to be the same guy - so the account had obviously been hijacked.
NEVER, NEVER, EVER, fill out any form that comes to you as a result of an EMAIL! In my case, several of the emails were directed to a company employee who was no longer with the company, and NEVER had an EBAY account anyway.
Basically, these emails are a dangerous form of SPAM. You can infer nothing from the email adress they sent the message to, except that it is now a SPAM target. A high percentage of random users will have an EBAY account, so that is what they are relying on.
ALSO NOTE that even if you have an Email address you use for a single purpose (like astromart), there are VIRUSes out there that will propogate your address to all and sundry, and the virus may reside on some other astromarter's computer which found your address in the guys address book.
Malcolm.
The emails are not from EBAY. They look very realistic, and in some ways they conform to the 'rules' that EBAY states should be used in identifying emails and web links from them - for example, the URL should conform to a specific address. The emails I have received include links that look like secure links to EBAY, but in fact are links to some other site with a form that sucks your information to who knows where.
The information you unwittingly supply by filling out one of these forms can be used to hijack your EBAY account and defraud other innocent EBAY users, using your good feedback to avoid suspicion long enough for a transaction to go through.
Point of fact - my brother recently was interested in a high end canon digital camera - the seller stated that he was a German customs officer selling confiscated goods. (ya right!!) Checking the sellers feedback showed that the same guy had recently bought a coupon to a restaurant in Kansas. Very unlikely to be the same guy - so the account had obviously been hijacked.
NEVER, NEVER, EVER, fill out any form that comes to you as a result of an EMAIL! In my case, several of the emails were directed to a company employee who was no longer with the company, and NEVER had an EBAY account anyway.
Basically, these emails are a dangerous form of SPAM. You can infer nothing from the email adress they sent the message to, except that it is now a SPAM target. A high percentage of random users will have an EBAY account, so that is what they are relying on.
ALSO NOTE that even if you have an Email address you use for a single purpose (like astromart), there are VIRUSes out there that will propogate your address to all and sundry, and the virus may reside on some other astromarter's computer which found your address in the guys address book.
Malcolm.