ebay security loophole

mikewill34

zerog wrote: »

If the owner is a scammer, then hypothetically this could affect the OP's reputation (now that we know it's a hotmail address), if the scammer bought from a seller who knows the OP by email... Also, the OP would be unable to open a genuine ebay account with that email address.

I don't know what the OP said to ebay, but the simple thing to do would be to tell them that an account was opened with an incorrect email address.

I am 99.9% sure it's a scam.
I have told ebay that the address is mine and they said it would be removed from the scammer's account, but this has so far proved to be lip service.

mikewill34

zerog wrote: »

I don't see how this is a security threat to the OP. If anything, it's a security threat to the owner of that ebay account, as the OP can see all his activity

Might try reporting it in this manner to see if I can poke some one in the eye at ebay so that they take this seriously

NeverEnough

The words HOTMAIL and PROFESSIONAL do not exactly go together.......I tend to avoid so-called "professionals" in any field who give out hotmail addresses as their email address......having said that, it does seem lax of ebay not to have security in mind to validate email addresses.

mikewill34

NeverEnough wrote: »

The words HOTMAIL and PROFESSIONAL do not exactly go together.......I tend to avoid so-called "professionals" in any field who give out hotmail addresses as their email address......having said that, it does seem lax of ebay not to have security in mind to validate email addresses.

I have the Hotmail account because it used to be the only way M$ would allow access to MSDN. I have retained it as a backup.

MarilynMonroe_2

So did money come out of your paypal account, and if so how did they get THAT password?

mikewill34

MarilynMonroe wrote: »

So did money come out of your paypal account, and if so how did they get THAT password?

No my pay account was not touched, neither has a fake PayPal account been created.

shaun_from_Africa

No verification is needed to set up an ebay account, but it is needed if you want to sell or bid on something.

I have just set up a "disposable" ebay account, and this is what appears when trying to sell or bid, (although I don't know how good using a phone to verify an identity would be).

mikewill34

shaun_from_Africa wrote: »

No verification is needed to set up an ebay account, but it is needed if you want to sell or bid on something.

I have just set up a "disposable" ebay account, and this is what appears when trying to sell or bid, (although I don't know how good using a phone to verify an identity would be).

Did you try a buy it now as I tried a normal auction and was not asked to verify other have reported that they got asked for bin.
Others have also reported they can list items for sale without verification.

theonlywayisup

mikewill34 wrote: »

Did you try a buy it now as I tried a normal auction and was not asked to verify other have reported that they got asked for bin.
Others have also reported they can list items for sale without verification.

In theory you could bid on a zillion items but unless you are required to pay (ie by winning) then there is no transaction made, so this may be why no verification is asked for.

A BIN on the other hand is different, most now are covered by 'immediate payment' and those which aren't are being phased in by Ebay to work in that format.

mikewill34

theonlywayisup wrote: »

In theory you could bid on a zillion items but unless you are required to pay (ie by winning) then there is no transaction made, so this may be why no verification is asked for.

A BIN on the other hand is different, most now are covered by 'immediate payment' and those which aren't are being phased in by Ebay to work in that format.

Makes sense good spot.