I totally agree. When I got my first "scam" email on 8/19 from eBay I was shaken up a bit since it said that my account was "suspended" and to reinstate it, simply "confirm" my name, ID, password, credit-card info, bank info, mother's maiden name, firstborn, pets, etc. I'm exaggerating but it raised a flag or two.
There's a way to see who or what the originating email address the sender is
using. In my case it was NOT eBay. Just look beyond the "from" address in
the email header. Anyone can make their "from" address say whatever they
want it to. In my case, hidden in the text of the email is the "real" from
address. It was:
> <http://203.228.115.247/pect_kr/saw-cgi/DllUpdate/signin/ws/ISAPIDll/eBayISAPI
> .dllSignIn_UsingSSL0_pUserId_ruhttp_3A2F2Fsiteid0cgi1.ebay.com_Faw-cgi_eBayISA
> PI.dll_FMyEbayLogin_pppass_co_pxartnerid2_pageType174_ui10.html>
I'm sorry to report that it's STILL active. The page looks JUST LIKE an eBay sign-in page but it isn't.
I reported this to "spoof@ebay.com" immediately. But here it is 3 weeks later and the fraud is still going stong.
Be carefull out there.
Fred
**********************************
Fred Yavorsky
Jenkintown, PA
fred@twistcomm.com
http://twistcomm.com/
> From: gpvb1@comcast.net
> Date: Mon, 06 Sep 2004 03:16:59 +0000
> To: classicrendezvous@bikelist.org
> Subject: Beware Phishing scams! was: [CR]Frejus/pog bikes on e-bay / photos of
> Pro Tour up
>
> Stop! Never, ever reply to scams like that!
> I'm 100% sure it was a scammer that was "phishing" for your credit card
> number. I sure hope you didn't give him your credit card number, but if you
> did, call your issuing bank immediately, stop that card, and change your
> password / PIN just to be safe.
> Folks, and this bears repeating I think, never give your account ID, password,
> or any financial/sensitive information of any kind to one of these scammers
> that e-mail you. There is absolutely no legitimate reason for eBay, PayPal, or
> your bank, stockbroker, etc. to be asking for sensitive information via
> e-mail, NONE. The e-mail may look dead-on realistic (like it came from eBay,
> or PayPal, or your bank - I got a couple of those last week for the first time
> - looked like a legit e-mail from my credit card issuer, but was a phishing
> expedition).
> Delete any such e-mail immediately (or report it to fraud @wherever.com first,
> then delete it).
> End of protective rant.
> Greg Parker
> Dexter, Michigan
> http://www.bicycleclassics.com
>
> Date: Sun, 05 Sep 2004 19:06:17 -0700
> From: Jay Sexton <jvs@sonic.net>
> To: classicrendezvous@bikelist.org
> Subject: [CR]Frejus/pog bikes on e-bay / photos of Pro Tour up
>
> Hello all,
>
> Okay, something strange is going on. I admit to the list that I was the
> high bidder on the Frejus and (supposed) Pog track bike before the
> auctions were ended prematurely, and about four hours later I get a
> fraudulent bidder notice from e-bay, informing me that someone has
> attempted to bid using my e-bay I.D, and I need to confirm my account
> using a credit card number. First time ever this has happened. I hope
> it is just co-incidence. Have any of you had this happen, and if so
> how did you deal with it? If you decide to reply, please do so off
> list, as I suspect some would object to me bringing this to the list.
> Sorry, but it kinda pissed me off, someone trying to fraudulently use my
> I.D.
>
> For classic bike content, I have posted photos of my nearly completed
> Centurion Pro Tour 15. Photos are here if anyone is interested:
>
> http://pg.photos.yahoo.com/
>
> Ignore the saddle and the tires, and obviously I have a few more parts
> to install, but I'm on a roll! I'll post better photos when the bike is
> done. And thanks for looking.
>
> See ya.
> Jay Sexton
> Sebastopol, CA