Just got a VERY believable email from "ebay" - a spoof, watch out, it's a clever one IMO:



eBay Safeharbor Department Notice

Fraud Alert ID : 00626654


Dear eBay member,

You have received this email because you or someone else had used your identity to make false purchases on eBay. For security reasons, we are required to open an investigation on this matter. We treat online fraud seriously and all cases which cannot be resolved between eBay and the other involved party are forwarded for further investigations to the proper authorities. To speed up this process, you are required to verify your personal information against the eBay account registration data we have on file by following the link below.

http://scgi.ebay.com/verify_id=ebay&user=00626654

Please save this fraud alert id for your reference.

When submitting sensitive information via the website, your information is protected both online and off-line. When our registration/order form asks users to enter sensitive information (such as credit card number and/or social security number), that information is encrypted and is protected with the best encryption software in the industry - SSL.

Please Note - If your account informations are not updated within the next 72 hours, we will assume this account is fraudulent and it will be suspended. We apologize for this inconvenience, but the purpose of this verification is to ensure that your eBay account has not been fraudulently used and to combat fraud.

We apreciate your support and understading, as we work together to keep eBay a safe place to trade.

Thank you for your patience in this matter.

Regards, Safeharbor Department (Trust and Safety Department)
eBay Inc.

Please do not reply to this e-mail as this is only a notification mail sent to this address and can not be replied to.

Copyright 2004 eBay Inc. All Rights Reserved.
Designated trademarks and brands are the property of their respective owners.
eBay and the eBay logo are trademarks of eBay Inc. which is located on Hamilton Avenue, San Jose, CA 95125


Oh and remember this came from the normal ebay address (except if you look at the detailed headers) and has pictures and formatting just like what ebay normally send you.

Crafty!

----------
Uno 1.0ie Start. Standard.

i got a real spate of these lately.i hadnt used my account for about a month and got emails that my account was frozen.sent them to ebay as spoofs,but they must look for active accounts that havent been used for a while.clever people,scum that they are

A Dog Is Not Just For Christmas
Sliced Thinly It Can Last Till Easter

I know, immediately i thought "scum have stolen my account" which if i wasn't switched on may have led me to type in my details to re-secure my account - there are lots of people out there that would fall for it I think.

My mum gets one for her paypal: "your account has expired and will be suspended if you don't resubmit your details" type thing, so believable when I read it. I forward them to spoof@ebay/paypal and they just give a stupid waste of time auto-responder

----------
Uno 1.0ie Start. Standard.

eBay don't give a ****. They probably kick their shoes off and have a bloody good laugh.

Steve...

Go on the Fiats...

Probably, sad as it is

----------
Uno 1.0ie Start. Standard.

Scamming w***ers. [!]

Crafty, but w***ers.

Oh and the post link above isn't what the HTML is really pointing to, instead it's an IP address/sign in so slightly obviously but not to everybody!

----------
Uno 1.0ie Start. Standard.

Yeah if you get one of these type of emails always examine the header gives all the details of everywere the emails been in hotmail you can set it in options or in outlook you just right click the email and go to options.

Genuine one:
Return-Path: <[email protected]>
Received: from camp16.sjc.ebay.com (camppool06.emailebay.com [216.33.244.105])
by jupiter.nildram.co.uk (8.12.8/8.12.3) with ESMTP id i54MGKAl085506
for <[email protected]>; Fri, 4 Jun 2004 23:16:20 +0100 (BST)
Delivered-To: <[email protected]>
Received: from [10.112.159.34] (dingdong-5.sjc.ebay.com [10.112.160.34])
by camp16.sjc.ebay.com (8.12.3/8.12.3) with ESMTP id i54LfCTx025266
for <[email protected]>; Fri, 4 Jun 2004 15:16:08 -0700
From: "eBay" <[email protected]>
Reply-to: [email protected]
To: [email protected]
Subject: Bag a Bargain from a Unique Boutique at eBay.co.uk
Date: Fri, 4 Jun 2004 15:16:08 -0700
Message-ID: <[email protected]>
X-Mailer: Kana Connect 6
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="1086387368542.MimeBoundarY"

If it had anything other than Ebay and your ISP addresses and hosts its more than likly a spoof or if in doubt contact ebay. This is a big issue and for people to trust ebay this type of crap needs to stop. Recently a guy in america was selling a G4 Laptop on ebay and a scammer in london tried scamming him out of the laptop full storey here http://69.93.112.102/~pbook/ long but great read! the scammer got scammed [8D].

Chris; trouble is, not more than 30% of users know about mail headers etc. and ebay don't help the matter by using lots of forwarding addresses in their standard emails.

I.e. by camp9.sjc.ebay.com (8.12.3/8.12.3) with ESMTP id i54LexS2017147 comes as part of it, now do you think camp9 could be the domain and ebay the sub domain? It's hard to know. The only thing you can do is be so vigilent and as you say, contact ebay - as useless as they are, they might be able to help. I of course got back a auto responder slightly tailored to make me think it's personal to me, instead, as Steve has said, they aren't bothered, they make so much revenue they couldn't give a damn! The way ebay is going somebody is going to have to regulate it in the next decade IMO and things will change.

I read the powerbook scam a while back - what a read! Glad they got the twit back!!

----------
Uno 1.0ie Start. Standard.

Yeah, that Powerbook thing was interesting. Wasn't there a thread on here a few weeks ago linking to that. A few bricks, etc. The scammer had to pay the duty, and people actually watching his address, etc.

New Fiat Ulysse 2.2JTD Eleganza, with options

Yeah that was great, they made him pay a few hundred quid for nothing. Makes you wonder how many people he's caught out though and got the goods for free.

"The new rules are very simple, the FIA will keep them to themselves until such a time as Ferrari needs them" Patrick Head

http://www.geocities.com/drpepperdionysus

A second reply: (means they have read the email!)

Hello,

Thank you for contacting eBay's Trust and Safety Department about email
solicitations that are falsely made to appear to have come from eBay.
These emails, commonly referred to as "spoof" messages, are sent in an
attempt to collect sensitive personal information from recipients who
reply to the message or click on a link to a Web page requesting this
information.

The email you reported did not originate from, nor is it endorsed by,
eBay. We are very concerned about this problem and are working
diligently to address the situation. We are currently investigating the
source of this email to take further action. You may rest assured that
your account standing has not changed and that your listings have not
been affected.

We advise you to be very cautious of email messages that ask you to
submit information such as your credit card number or your password.
eBay will never ask you for sensitive personal information such as
passwords, bank account or credit card numbers and Personal
Identification Numbers (PINs), in an email itself. If you ever need to
provide information to eBay please open a new Web browser, type
www.ebay.co.uk, and click on the "site map" link located at the top the
page to access the eBay page you need.

If you entered personal information such as your password or credit card
numbers into a Website based on a request from a spoofed email, you need
to take immediate action to protect your identity.

For information on spoof emails and what action you need to take if you
have entered in your personal information, we strongly encourage you to
read our spoof tutorial:

http://pages.ebay.co.uk/education/spooftutorial/

If you have any doubt about whether an email message is from eBay,
please forward it immediately to [email protected] and do not respond to
it or click on any of the links in the email message. Please do not
change the subject line or forward the email as an attachment.

Keep in mind the [email protected] email address is reserved for handling
reports of attempts to impersonate eBay. In order to investigate these
reports in a timely manner, we can only accept forwarded messages at
this address.

Once again, thank you for alerting us to the spoof email you received.
Your vigilance helps us ensure that eBay remains a safe and vibrant
online marketplace.

As always, our goal is to help you with your questions as quickly and
accurately as possible. If you feel that you still have unresolved
questions, please reply directly to this email and we will gladly
assist.

We value your business and thank you for using eBay.

Regards,

eBay Trust and Safety



----------
Uno 1.0ie Start. Standard.