Just got a pretty good scam ebay email

rubadub

Most are blatantly bad, this was the best I have seen yet. This email came in under the guise of somebody who did a "ask seller a question" on one of my items. I hit respond now and it jumps to the ebay login screen (which I think is normal). BUT the page had all this ebay login stuff but ended in 100free.com.
Alarm bells were already ringing because I keep track of my auctions and they finished recently anyway. When I put the item number in it was for a knife (not me at all).

It did come from aw-confirm@ebay.com which seemed legit first time. I checked an previous questions come from member@ebay.com with the users name before that.

BEWARE

OFDM

I had a similar good one for paypal the other day.

greglo23

forward the email to spoof@ebay.com

phantom_lord

gmail seems to grab those kinda things pretty well and doesn't let them in.

secret_squirrel

rubadub wrote:

Most are blatantly bad, this was the best I have seen yet. This email came in under the guise of somebody who did a "ask seller a question" on one of my items. I hit respond now and it jumps to the ebay login screen (which I think is normal). BUT the page had all this ebay login stuff but ended in 100free.com.
Alarm bells were already ringing because I keep track of my auctions and they finished recently anyway. When I put the item number in it was for a knife (not me at all).

It did come from aw-confirm@ebay.com which seemed legit first time. I checked an previous questions come from member@ebay.com with the users name before that.

BEWARE

I've been getting ones like those for months if not years. The best thing you can do is never go to ebay by clicking on a link in an email. The best way to check is to examine the email headers for the correct routing. Most of the fake ones disappear off into Eastern Europe.

Dave-in-meath

I will say one thing;

DONT use the Eircom email service because ALL the fake paypal emails are allowed in lol.

Dave

J2DaC

Yeah, i get those emails aswell. How they got the ebay.com email sender, ill never know. If you put in **** you as your username twice itll go through!

TouchingVirus

you can set the X-Sender headers with mail scripts (using PHP or other languages) which will bluff the from email address. The IP wont correspond to an ebay IP address though

secret_squirrel

Its also worth noting that Ebay now put your account name on their emails as well as your Ebay nickname - anything that doesnt use both is 99% likely to be a fake.

Gone West

I spotted a nice new piece of spyware doing the rounds that opens their fake ebay site when you try to go to www.ebay.com

rubadub

FuzzyLogic wrote:

I spotted a nice new piece of spyware doing the rounds that opens their fake ebay site when you try to go to www.ebay.com

is it a good fake?

Stompbox

I got a spoof email today saying I had been suspended and I had to click the link at the bottom of the page to remove it.

Gone West

rubadub wrote:

is it a good fake?

lol.
nice.