Ebay Security Alert?

Gambler

Anybody else received a similar email?, not really sure what's going on as I think I've only ever bought about 5 itmes, never sold so only a light user really.

How has my account been accessed?

Dear xxxxxxxxxxxxxxx

It appears that a third party gained access to your eBay account and used it to send emails to other eBay members without your authorisation. The email address on your account may have been changed, so you may not have received any emails regarding this activity.

To protect your account, we have restored your email address and changed your eBay password and Secret Question (password hint question) to something random. As a result, you won't be able to sign into your eBay account with your old password. We assure you that your credit card and bank details are stored on a secure server and cannot be viewed by anyone.

This email will give you detailed instructions on how to restore access to your account as securely as possible. Please print out this text as a reference in case you have further questions.

What will happen to the emails sent without your permission?

We have notified the members who received the unauthorised emails and advised them to ignore the email. If other members contact you, please explain the situation to them. Please ask them to send us an email if they have any further queries. To use our Contact Us system, click on "Help" at the top of most eBay pages, then click on "Contact Us".

Here's what you can do now:

1) Choose a new eBay password
2) Change the password for your email account

1) Choose a new eBay password

We have changed your eBay password and Secret Question (password hint question) to something random. Here's how to choose a new password:

1. Go to the eBay homepage and click on "My eBay".
2. Click on "Forgot your password?" on the sign-in page.
3. Answer two of the questions from your contact information (such as your postcode and Date of Birth) as we have changed your Secret Question.
4. Check your email for the "Forgotten Password" email.
5. Copy the link in this email into the address bar of a new browser window. Do not click on the link.
6. Enter and confirm your new password.

Once you have created a new eBay password, please change your Secret Question and check that your eBay registration information is correct. You can do this in My eBay, under "Personal Information".

Tips for secure passwords:

Choose a completely new password, preferably a random combination of letters and numbers. This password should be different to all of your other online passwords.

Never give your password to anyone else. eBay will not ask you for your password or credit card details in any communication.

If you used your old eBay password for other services such as PayPal or online banking, you should choose a new password for those accounts as well.

2) Change the password for your email account

Change the password on your personal EMAIL account to verify that it is secure and cannot be accessed by anyone other than you. This is the password you use to access your email account and read your emails. You may need to contact your Internet Service Provider for assistance.

How could this happen?

You may be the victim of phishing emails or spoof websites. Please be on guard for emails that appear to come from eBay and contain links to websites asking you to sign in, or update confidential data such as your User ID, password or bank information.

Never sign into your eBay account via a link in an email. The safest way to access your eBay account is to type "www.ebay.co.uk" into the address bar of your internet browser and then click "Sign in" or "My eBay".

Always check your My eBay. Most emails from eBay or sent via the eBay system will be available in My Messages. If you are in doubt about an email you receive, forward it to us at

spoof@ebay.co.uk

Please visit our Safety Centre for more tips on protecting against spoof, protecting yourself online and buying and selling safely on eBay. To get there, click on the "Safety Centre" link at the bottom of the eBay homepage.

Thank you for your patience and cooperation in this matter. Please don't hesitate to contact us if you have further queries or require assistance.

Regards,

Customer Support (Trust and Safety Department)
eBay International AG

purplepatch

Probably a spoof in itself :rolleyes:

Try logging in from the ebay home page and check in your messages in My Ebay. If it's genuine it would be in there, but there again, if it is genuine you shouldn't be able to log in with your old password anyway...

Gambler

purplepatch wrote: »

Probably a spoof in itself :rolleyes:

Try logging in from the ebay home page and check in your messages in My Ebay. If it's genuine it would be in there, but there again, if it is genuine you shouldn't be able to log in with your old password anyway...

can't login so must be genuine.

purplepatch

The wording is very similar, identical in places, to one they sent me today after me account has been hijacked - see my thread.

You should be ok to follow the instructions, just make sure you don't click on any links in the email (don't appear to be any), go direct to ebay.co.uk home page and do it from there.

Be grateful if it's only emails - I've had 32 expensive items won by my hijacker today! :rolleyes::rolleyes::rolleyes::rolleyes:

ragjoy

purplepatch wrote: »

The wording is very similar, identical in places, to one they sent me today after me account has been hijacked - see my thread.

You should be ok to follow the instructions, just make sure you don't click on any links in the email (don't appear to be any), go direct to ebay.co.uk home page and do it from there.

Be grateful if it's only emails - I've had 32 expensive items won by my hijacker today! :rolleyes::rolleyes::rolleyes::rolleyes:

ok so the hijacker wins 32 items what good does this do him he is not going to pay so he is not going to get.
i dont see the point in hijacking other than to cause hassle.
please enlighten me as to what else they can do.

Gambler

ragjoy wrote: »

ok so the hijacker wins 32 items what good does this do him he is not going to pay so he is not going to get.
i dont see the point in hijacking other than to cause hassle.
please enlighten me as to what else they can do.

I'd like to know how on earth they have managed to access my passworded account.

purplepatch

ragjoy wrote: »

ok so the hijacker wins 32 items what good does this do him he is not going to pay so he is not going to get.
i dont see the point in hijacking other than to cause hassle.
please enlighten me as to what else they can do.

I *think" the scam is that they use my 100% feedback account to look like a reliable buyer, change contact details to theirs, win auction, scam seller with a fake paypay payment received email, goods sent out.

But I'm not sure!

Gambler, I have no idea. My scammer hacked into my email account and got the info re user id and then reset my password, very worrying how they found out the password. Someone on my thread suggested I do a spyware scan to see if I had a keylogger installed without my knowledge, but it didn't find anything.