ebay scam

[DjPete]

I think they got me.
I had 3 emails from a person saying he was still wanting his product sent.
Looked like legit email with ebay logos etc.
I clicked on his name and it then went to my normal looking account login so I could then see his details.
i logged in with username and password and got a message misspelt saying sorry for the inconvenience we have had a computer error with some emails...from ebay

sent it to ebay and they say it was fraudulant.
Investigating.
i have changed my password and ebay say the credit card details r enchrypted but who knows what these bastards have got...
checking account daily now!

Here is the fake link.
OBVIOUSLY DO NOT ENTER YOUR EBAY DETAILS!!!

http://70.88.162.114/httpsiginin.ebay.co...rEnterInfo&siteid=0&co_partnerid=2&UsingSSL=1
dont worry about it the link is now dead.
obviously packed up and gone...f***kers

[DjPete]

update
to be safe just killed the cards.
moral to the story.
dont reply to any emails from your email client
only reply to emails within the secure ebay website after you log in.
lesson learnt

[GlenTC]

Yep. Ye olde phishing. Always answer from the ebay interface until you have established a name, address. Key give away is that almost none of those pricks can spell worth a damn. (and that there ain't that many Busas in downtown Trinidad). Another thing they use is a non specific threat. That is a real joy. Every now and then you can bid on your own bike. I have bought mine twice. lol. It was a bargain, I knew the owner. Good looking dude.

[DjPete]

here's the dialogue I got after I logged in...
We are sorry for the inconvenience that this email

might have caused you but our mailing machines

aparently had a few errors so the email was sent to

several of our costumers.

Rest assured that your private data is in a safe place.

Thank you and once again sorry for the inconvenience.

The eBay team.

Note the mis spelling.
I would think they would steal my identity?
Or can they get to the encrypted card details Glen?
I cancelled the cards anyway.

[GlenTC]

Nope, they can't get the numbers. They aren't there. It works in an instant capture at sale kind of way. Same as my shop. The page you see when paying isn't even on the same server, it belongs to a sperate secruity firm who run an SSL, in my case, authorise (which belongs to Paypal or paypal belongs to them, however it works. So, even if the guy working the transaction with admin rights at the ebay service area cannot see the entire number of your card and he certainly can't see the 3 figure. A good rule of thumb is too use a credit card. it is federally insured for fraud or id theft. Only give your numbers to sites that clearly display SSL Authentication which can be referenced to a ABN and Address, if you need further proof, cross reference that with the Business registry or call the number as listed and see how they answer the phone. You can't really do that with the fleabay, but you can check with the history. Bogus accounts will show pretty quick. Those who have 'sold' 12 pairs of sunglasses this week are probably out of their depth selling five beautiful custom sportsbikes for a bargain. If it looks like bullshit, it is. What I have always offered if selling bigger second hang things, like dirtbikes or large tools, is to take a picture with the buyers name written on a post-it. Anyone who really wants your money will whip that straight off to you. Farq. I need a life.

In short, I can't see your numbers. I can tell you eveything but. Even down to what computer you are on and what you looked at and when. (I don't really look, even I have better things to do than that). My point being that I cannot see your numbers when you make a purchase and I built the site. No backdoor at all. Ebay uses the same security that I do. The only way they can get it is if you tell them directly.

[DjPete]

great tips there Glen thanks.
Yep did a search and I copped it.
This is the exact one I got..same name and all...
http://www.millersmiles.co.uk/report/4561

[GlenTC]

Having said all that, they can break into your ebay account and dick about with your delivery address and things of that nature. Pays to keep an eye on that every now and then. make sure they aren't using your account too run these scams. that is pretty common. That is why they always want to verify.

Their interfaces look the goods, don't they? Always check the address bar.

[Rocketrod]

I had the same thing happen a few weeks ago,only it was with paypal.
Got this email saying to log into your paypal account as something was amiss.When i did it kept saying wrong password,please try again.
Cut a long story short,i sent the dodgy email to paypal and immeadiatly changed my log in details.Paypal got right onto it and shut my account until further investigation.After about a week they sorted it and all is cool again now.

[Volvi]

ermm how do ppl still fall for it all, I often get emails from supposed banks with their logos asking to log in, its obvious coz no bank or any other reputable institution ever ask for that.

[DjPete]

the thing is Volvi it didnt say to log in or anything.
Nothing abvious like that..
i just clicked on his name to see who he was.
that took me to my ebay page (but wasn't) and then I logged in with username password as usual.
see the pics above.

that means you have never dealt with an ebayer direct via email??

I have done this before for real enquiries with no prob.
Obviously I won't in future.