New (to me) variant of fake Ebay email scam

MABAGANI · 8th December 2005, 04:18 PM

Same with Paypal, their official emails state your full name, the fakes don't.

VANDOO · 8th December 2005, 05:44 PM

I HAVE ALSO GOTTEN BOGUS EMAILS HAVING TO DO WITH EBAY AND PAYPAL. IF THEY ASK A QUESTION ABOUT MY INFORMATION I JUST FORWARD IT TO SPOOF@PAYPAL OR EBAY, SO FAR EVERY ONE OF THEM HAS BEEN A SCAM. RECENTLY I HAVE ENCOUNTERED LOTS OF EMAILS THAT SAY MY EMAIL WAS NOT DELIVERABLE TO THIS OR THAT I LOOKED AT ONE AND IT DIDN'T GIVE ANY INFO ON ANYONE I HAD RECENTLY SENT EMAIL TO SO NOW I AUTOMATICALY DELETE ALL SUCH EMAILS. I DELETE MANY MORE EMAILS THAN I OPEN SO IF A FORUM MEMBER I DID NOT KNOW DID EMAIL ME HE SHOULD PUT SOMETHING IN THE TOPIC TO GET MY ATTENTION, VANDOO PERHAPS AS THE TRICKSTERS HAVEN'T USED THAT YET.

ITS FRUSTRATING THAT THE NO GOOD PEOPLE CAN MAKE SO MUCH TROUBBLE AND THERE SEEMS TO BE NO WAY TO MAKE THEM PAY FOR THEIR SINS AT LEAST NOT UNTILL JUDGEMENT DAY.

Mark · 8th December 2005, 06:07 PM

I haven't gotten the fake sale/purchase yet, but I have gotten the undeliverable e-mail ones. The fact that the attachment is a zip file was a pretty big pointer.

The cleverest ones I have seen so far (sort of like this new e-bay one), are the ones that just inform you that something has changed in your user profile, like an address or e-mail or a new credit card (that is the best one IMO -- reverse psychology) being added. All very official looking, and I am sure that if you go to the provided link it will look just like BidPay or PayPal or whatever -- but once you have tried to log in, they have all the information they need. One even came from a domain with "PayPal" in the name, but with a foreign country code rather than ".com." The genius is that they don't ask you to confirm or check anything. They rely on your puzzlement at the announcement to check it out.

I verified the fraud by going directly to PayPal (not using their link), and checked to make sure everything was unchanged.

8th December 2005, 04:18 PM	#1
MABAGANI Member Join Date: Dec 2004 Posts: 221	Same with Paypal, their official emails state your full name, the fakes don't.

8th December 2005, 05:44 PM	#2
VANDOO (deceased) Join Date: Dec 2004 Location: OKLAHOMA, USA Posts: 3,138	I HAVE ALSO GOTTEN BOGUS EMAILS HAVING TO DO WITH EBAY AND PAYPAL. IF THEY ASK A QUESTION ABOUT MY INFORMATION I JUST FORWARD IT TO SPOOF@PAYPAL OR EBAY, SO FAR EVERY ONE OF THEM HAS BEEN A SCAM. RECENTLY I HAVE ENCOUNTERED LOTS OF EMAILS THAT SAY MY EMAIL WAS NOT DELIVERABLE TO THIS OR THAT I LOOKED AT ONE AND IT DIDN'T GIVE ANY INFO ON ANYONE I HAD RECENTLY SENT EMAIL TO SO NOW I AUTOMATICALY DELETE ALL SUCH EMAILS. I DELETE MANY MORE EMAILS THAN I OPEN SO IF A FORUM MEMBER I DID NOT KNOW DID EMAIL ME HE SHOULD PUT SOMETHING IN THE TOPIC TO GET MY ATTENTION, VANDOO PERHAPS AS THE TRICKSTERS HAVEN'T USED THAT YET. ITS FRUSTRATING THAT THE NO GOOD PEOPLE CAN MAKE SO MUCH TROUBBLE AND THERE SEEMS TO BE NO WAY TO MAKE THEM PAY FOR THEIR SINS AT LEAST NOT UNTILL JUDGEMENT DAY.

8th December 2005, 06:07 PM	#3
Mark Member Join Date: Dec 2004 Posts: 987	I haven't gotten the fake sale/purchase yet, but I have gotten the undeliverable e-mail ones. The fact that the attachment is a zip file was a pretty big pointer. The cleverest ones I have seen so far (sort of like this new e-bay one), are the ones that just inform you that something has changed in your user profile, like an address or e-mail or a new credit card (that is the best one IMO -- reverse psychology) being added. All very official looking, and I am sure that if you go to the provided link it will look just like BidPay or PayPal or whatever -- but once you have tried to log in, they have all the information they need. One even came from a domain with "PayPal" in the name, but with a foreign country code rather than ".com." The genius is that they don't ask you to confirm or check anything. They rely on your puzzlement at the announcement to check it out. I verified the fraud by going directly to PayPal (not using their link), and checked to make sure everything was unchanged.