Real E-Bay e-mail or fake?

[godsey1]

Got this in my e-mail this evening:

 

eBay request: Confirm your Identity.

 

Dear eBay customer,

 

Your bank has contacted us regarding some atempts of charges from your credit card via the eBay system. We have reasons to believe that you changed your registration information or that someone else has unauthorized access to your eBay account Due to recent activity, including possible unauthorized listings placed on your account, we will require a second confirmation of your identity with us in order to allow us to investigate this matter further.Your account is not suspended, but if in 48 hours after you receive this message your account is not confirmed we reserve the right to suspend your eBay registration. If you received this notice and you are not the authorized account holder, please be aware that it is in violation of eBay policy to represent oneself as another eBay user. Such action may also be in violation of local, national, and/or international law. eBay is committed to assist law enforcement with any inquires related to attempts to misappropriate personal information with the intent to commit fraud or theft. Information will be provided at the request of law enforcement agencies to ensure that perpetrators are prosecuted to the fullest extent of the law.

 

 

 

To confirm your identity with us click here:

http://signin.ebay.com/aw-cgi/eBayISAPI.dl...Name=h:h:sin:US

 

After responding to the message, we ask that you allow at least 72 hours for the case to be investigated. Emailing us before that time will result in delays. We apologize in advance for any inconvenience this may cause you and we would like to thank you for your cooperation as we review this matter.

 

 

 

 

eBay will request personal data (password, credit card/bank numbers, and so on) in this email.

 

Thank you for using eBay!

http://www.ebay.com/

 

 

 

 

--------------------------------------------------------------------------------

 

 

This eBay notice was sent to you based on your eBay account preferences. If you would like to review your notification preferences for other types of communications, click here. If you would like to receive this email in text only, click here.

 

As outlined in our User Agreement, eBay will periodically send you information about site changes and enhancements. Visit our Privacy Policy and User Agreement if you have any questions.

 

Copyright © 2004 eBay Inc. All Rights Reserved.

Designated trademarks and brands are the property of their respective owners.

 

eBay and the eBay logo are trademarks of eBay Inc.

 

My credit card on E-Bay did expire, and we are in the process of getting the new one listed, but this sounds crazy,

Tony

[itsralph]

Complete fraud, eBay never asks for that information via e-mail. This is a common phishing scam, if eBay or Paypal want you to provide any information they will direct you to sign in on their website, not click on an email link.

 

The 72 hours thing is a new twist, gives the scammers time to clean out your account before you wise up.

[godsey1]

These spoof e-mails are getting better and better all the time. Thanks for the info,

Tony

I just sent a copy to [email protected]

[spongebue]

I'm not surprised it's a fake, but it does appear as though the signin.ebay.com would be a subdomain of ebay.com. I wonder how the scammers did it, maybe they registered a signin.ebay.com domain or something.

[CincYnoTi]

that http link above will take you to ebay. but if you click on the link in the original email, it will take you to the spoofer's web site. the hotlink in the email is done with html and can be set to anything: "click this legitimate link...really this won't hurt you!" but when it was text cut/pasted into the post above, you only get the http text and not the original hotlink buried in the email.

[spongebue]

good point. that reminds me, aol automatically disables every picture and link in emails "for your safety" unless you click on a thing to enable it, as though everyone using it was a complete idiot... err wait...

[Philflound]

Almost all ebay and paypal emails are fake. They usually require you to log in and then want your bank info, credit card, etc. What I do is this.

 

Ebay ID: *uckyou

Password: *ock*ucker

 

Fill in the *'s with the appropriate letter. If it goes through with a thank you, then you've logged on to a fake account. Always report these sites.

 

Phil

[godsey1]

Hey Phil, I like the way you take care of them . E-Bay confirmed it was a spoof.

Tony

[MrRetroGamer]

Legit emails will address you BY NAME, not with generic "Dear Customer" or something similar.

[Spirantho]

Easy way to tell if something is kosher:

have a look at the source - if the link is directing you to somewhere other than where it says it is, it's a fraud. I know in Opera, for example, you can just hover the mouse over the link and it'll say where the link is really] going to.

[itsralph]

Notice that if you hover over the link in your post, you will see the words OneTimePayment in your address bar. If you were then to enter your bank info or credit card info, etc, it is processed as an electronic payment, thus screwing you immediately.

[itsralph]

And now that I look at it again it is right there in plain sight in the hyperlink itself. So they are telling you right up front that they are going to rip you off.