WARNING: do not fall for this like I did

[mkramm]

I got an email today, from ebay saying that they could not verify some info on my account, and gave me a link to click and log in. Looked just like ebay, but it hijacked my account. I figured out what I did right away and changed my password, but I dont know if that was enough. I then got an email from paypal saying that they couldnt insert paypal logos into my auctions, well I dont have any auctions going on! I am going to try and paste the email here so you know not to do it if you get one:

"Dear eBay User,

During our regular update and verification of the accounts, we could not verify your current information. Either your information has changed or it is incomplete.

As a result, your access to bid or buy on eBay has been restricted. To start using fully your eBay account, please update and verify your information by clicking the link below :

https://cgi3.ebay.com/aw-cgi/eBayISAPI.dll?VerifyInformation


Regards,
eBay Inc.
"

I replied and cursed and drew a big finger (middle one).

:evil:

[200x Basket]

i made a post about this and asked that it be made a sticky. well i guess it was not and another board member has been screwed. look on ebay for fraud help.

[okieRrider]

i have got that same email but deleted it cause i saw somethin on here about it.....chris

[TimSr]

I get a couple of these every day. First forward them to spoof@ebay.com or spoof @paypal.com . They will reply to you, and tell you whether or not it was sent by them.

2nd, NEVER use an emailed link to do ANYTHING in paypal or Ebay, such as update information. Go to your browser, and type in Ebay.com or paypal.com, and log in. That way you know youre actually in your account, and not in a lookalike account aimed at stealing your information.

[J.D.]

I made this is a sticky for all to see.

[kimmer250r]

If you read the emails that ebay sends you, you will notice that in everyone is says.."REMEMBER" Ebay will never send you an email asking for personal information (such as passwords, credit card numbers, pin numbers, etc.). My buddy had the same email not 2 days ago and he forwarded it to ebay so they would get busted.

[mkramm]

yeah, but it took me to an almost perfect replica of the myebay login screen. The only thing that wasnt right was the address.

The email didnt say anything about them wanting my password or anything, it literally looked like a legit ebay email. :oops:

[jeswinehart]

i had gotten the same thing about 2 months ago (a couple of days after using paypal) and just deleted it. i didn't suspect i was about to get ripped off ,,, i just didn't feel like screwing with it at the time. i havn't ever gotten another one.
like mkramm said ,,, it looked on the up + up.
sounds like 250rmanfmf got the same email ( + ripped off). i just read that this morning in trikeslyvania posting.

john

[Howdy]

I just got this email:----- Original Message -----


From: support@paypal.com
To: 4howdy
Sent: Wednesday, September 24, 2003 9:07 PM
Subject: PayPal Warning

PayPal Warning!

Dear paypal user,

Due to concerns we have for the safety and integrity of the PayPal
community we have issued this warning.
Per the User Agreement, Section 9, we may immediately issue a
warning, temporarily suspend, indefinitely suspend or terminate your membership
and refuse to provide our services to you if we believe that your actions
may cause financial loss or legal liability for you, our users or us. We may also
take these actions if we are unable to verify or authenticate any
information you provide to us.

Please follow the link below:
https://www.paypal.com/cgi-bin/webscr?cmd=login-run and update your account information now



Please note that this is not a complete list of all our products and features. All products, features, and policies are subject to change. Be sure to log in to your PayPal account on a regular basis to view the "Policy Updates" page which can be found in the "What's New" box.
Please do not reply to this e-mail. Mail sent to this address cannot be answered. For assistance, log in to your PayPal account and choose the "Help" link in the footer of any page.

To receive email notifications in plain text instead of HTML, update your preferences here.


News





Community Page
Learn about the PayPal Community

Fight Against Leukemia and Lymphoma


Click the button to make a donation to the Leukemia & Lymphoma Society.


Protect Your Password
You should never give your PayPal password to anyone.


How ever the link in the email pointed to this site:
WARNING: This is not the real paypal site!!
www.paypal-warnings.org

It didn't get me at all. A copy of it complete with the header was sent to spoof@paypal.com maybe they can bust these people.
Howdy

[Howdy]

I did a who is it of the domain name and got this:


whois -h magic www.paypal-warnings.org
paypal-warnings.org is registered with www.easyspace.com - redirecting to whois.easyspace.com

whois -h whois.easyspace.com paypal-warnings.org
Registrant:
Mr Hiroyasu Ishikawa
Kuji 2-25-17-102
Hitachi shi
Ibaraki ken
319-1222
JP

Domain Name: PAYPAL-WARNINGS.ORG

Administrative Contact, Billing Contact:
"Mr Hiroyasu Ishikawa" <kamp@taishan.com>
Phone: 0294-52-6027
Fax: 0294-52-6027
Technical Contact, Registrar:
"Mr Easyspace Hostmaster" <hostmaster@easyspace.com>
Phone: +44 1932 350 097
Fax: +44 1932 350 222

Record last updated on 2003-09-22.
Record expires on 2004-09-22.
Record created on 2003-09-22.

Domain servers in listed order:

NS1.EASYPOST.COM 216.167.71.20
NS3.EASYPOST.COM 216.167.71.24

;) ;) ;) ;)

Howdy

[Howdy]

Email back from Paypal:

Dear Robert Shively Aka "howdy,

Thank you for contacting PayPal.

Thank you for bringing this suspicious email to our attention. We can
confirm that the email you received; was not sent to you by PayPal. The
website linked to this email is not a registered URL authorized or used by
PayPal. We are currently investigating this incident fully. Please do not
enter any personal or financial information into this website.

If you have surrendered any personal or financial information to this
fraudulent website, you should immediately log into your PayPal Account and
change your password and secret question and answer information. Any
compromised financial information should be reported to the appropriate
parties.

If you notice any unauthorized activity associated with your PayPal
transaction history, please immediately report this to PayPal by following
the instructions below:

1. Go to https://www.paypal.com/
2. Click on the Security Center at the bottom of the page
3. Click on "Report a Problem"
4. Select the Topic: Report Fraud
5: Select the Subtopic: Unauthorized use of my PayPal Account, and click
Continue.
6. Follow the instructions to access the appropriate form

If you have any further questions, please feel free to contact us again.

Sincerely,
PayPal Account Review Department
PayPal, an eBay Company

[mkramm]

Nice, I guess I should pay more attention to the address bar, but I get freaking emails from paypal & hotmail all the damn time. THe level of ripping people off is getting bad. Has anyone looked at all the fakes on ebay...and ESPECIALLY TRADERONLINE??? just goto atvtraderonline.com and do a search for yamaha grizzly. YOu will find tons of fakes.

[foster]

Here's how the scum operate.
Be careful, everyone.
http://www.msnbc.com/news/957191.asp?vts=092420031915

PS Nice site. I just bought a mint 185s and am getting good advice here.
Cheers

[slowmo]

The https:// should be a tipoff- the "s" just don't look right.... :shock:

[Howdy]

The https:// should be a tipoff- the "s" just don't look right.... :shock:

The https:// actually is for a secure server. This is a anti fraud thing. Everytime you sign into the real Paypal the "S" will be in the URL.
;)
Howdy

[slowmo]

Ahhh.....thanks for the correct correction...... I don't usually use Ebay so I've never seen that.

[smokeyhonda]

I have gotten several spoofs emails with the paypal logo, the tipoffs were there, The greeting should ALWAYS use your proper name not "user" or "valued customer". Thats the first tip. You all know the second- the address bar sends you some where else, In my case it was to thisle and clover or something like it. I reported them but will prob never see them get caught.

[Tri-ZNate]

Ebay and Paypal have said to me that they will never send an email with a web address in it or ask you to verify info.

[Phroziac]

Real paypal emails always tell you to type in the url..that's always the best to do anyway.

[LonesomeTriZ]

Make sure you always report those emails to Ebay and Paypal. I get fake email about my Paypal account every now and then and and report them. I think it is called spoof something. You will see it on the Paypal home page after you log in to your account. If you keep reporting them eventualy the scum bags get cought.

[TABDUDE]

Thanks for the heads up guys! I would have never realized the fraud possibility.
TB

[toyvette81]

tell ebay, they will bust their ***** i promise, they have done it for us **,

[HRC250R]

Paypal will NEVER address you as "customer"...they will always use your correct name.....I was a dumb-ass and lost $680 to a record store in Belgium...my bank was cool and I got it back so I just cancelled my Paypal account....

[350Xhilaration]

This is stuff I see everyday. It's one part of my job. The virus/spyware writing scum are getting more sophisticated everyday. They are getting better and better at "social engineering" tactics. (getting users to click links to bad stuff) A few things to look for:
-Poor grammar (as quoted from the first post:)
To start using fully your eBay account,

-Look in the status bar for the url you actually will be going to when hovering over the link (this is many times spoofed as well, so don't solely rely on this)

-Unless you're expecting an email from someone with an attachment, don't open it. Verify with the sender that they actually sent the email to you with the attachment.

-As Howdy has mentioned, don't ever react or respond to emails that are asking you (or telling you) about any accounts, whether eBay, Paypal, or online banking. None of these places will EVER send emails to you asking you to update your account information.

-CNN, AOL, or any other news organization are not going to email you video (or links to them) of the latest tragedy, news stories, massive amounts of casualties in Iraq and Afghanistan or the capture of terrorists in either of these places.

-Be skeptical of all email. ALL. Even if it looks legit and from someone you know, be cautious. Many worms have their own SMTP engines that will harvest emails from the infected computer and send their own mail without you even knowing it.

There was a story this past week about a German guy that received a spoofed email sent by a variant of the Sober virus. It looked like it was from the German government, with insignias and all, informing him that they had found illegal data on his computer. He turned himself in to the authorities. They went to his home, took his computer and it had child porn on it. Busted by a virus spoofed email.

[yamaha_tri_z]

Hey 200xbasket. I really Like your 500r. i Have been in long search for one of those. If you could keep a lokkout for one in any shape it would be nice.