Ebay and paypal spoof mails. Please read

oldagetraveller

**Please note. Because of the way some email is processed by your service provider,
this survey invitation may be displayed on your computer before our original
email response. Please scan your current emails for our original response.
Thanks!**

Dear eBay Community member,

On 10/07/2005 I replied to the email message you sent on 10/07/2005. As part
of eBay's commitment to excellence, I want to make sure I met your needs in my
response. Would you please take a minute to answer a few questions to let me
know how I did?

http://ebay.benchmarkportal.com/ebayeu/survey.taf?survey_id=647&user_id=6D2C3047-B82C-4677-9E65-BF6EB6B7DE66

To respond to our survey, please click on the web address above. If that does
not work, please cut and paste the entire web address into the address field
of your browser. NOTE: Please respond within five days so that you can provide
timely feedback to me. AFTER 5 DAYS, THIS INVITATION WILL EXPIRE.

If you wish to take the survey anonymously, click the link below:

http://ebay.benchmarkportal.com/ebayeu/survey.taf?survey_id=647&user_id=6D2C3047-B82C-4677-9E65-BF6EB6B7DE66&anon=yes

Thank you for your help!


eBay Customer Support

** An important note from the survey vendor **

In order to process your survey, we must collect personal information from you
that are protected by worldwide data protection laws. BenchmarkPortal and its
international group of partners are committed to compliance with all laws. We
have taken the necessary steps to ensure that we meet the obligations required
by country-specific legislation and the EU Directive on Personal Data Privacy.
By providing your Authorisation below, you are allowing us to collect, process,
access, and/or transport your data to a worldwide website located in Santa Maria
USA. This website will be accessible to selected Benchmark Portal's employees
worldwide and our client eBay.

All individuals with access rights have been educated on data privacy laws and
the use of personal data, and have signed Confidential Non-Disclosure Statements
holding them accountable for compliance.

Your data will be used for the purpose of personalising our content delivery
and services to meet your individual needs based on the information provided
on our surveys. Our customised approach of providing focused information based
on the personal data you provide, will be embraced by BenchmarkPortal and our
client eBay.

Benchmark Portal will not supply your data to any third party without your explicit
Authorisation.

A copy of our Privacy Principles is available for your review. For further information
regarding our detailed Global Data Protection Policy, please click here: http://ebay.benchmarkportal.com/ebay/bmp_survey_priv.pdf
.

For further information on eBay's Privacy Policy, click here: http://pages.ebay.co.uk/help/community/png-priv.html
.


If you want to be excluded from future surveys and survey correspondence, please
click below:

http://ebay.benchmarkportal.com/ebayeu/opt_out.taf?id=6D2C3047-B82C-4677-9E65-BF6EB6B7DE66





Don't know if the above is a "con" but just in case I've not followed the links, sent it to eBay and deleted the thing.
Unfortunately I might be receiving genuine messages but I now treat all as scams. "Collect personal information" seems a bit suspect to me!?

oldagetraveller

I've also had another e-mail this morning which I'll not post because it worryingly contains my username. This one is the usual credit card etc. verification of which i've received many but usually addressed to Dear Ebay member or similar.
I suspect it's also a scam but appears more "genuine" with the heading of my username and Dear "my username." Once again a link to follow.

TheChillPill

Ok, so I dare say alot of you are aware of the scam emails that come through and the various ways they can get you to click links that are genuine (slighly mis-spelt domains, javascript etc etc), however this one actually uses ebay itself.

Heres how it works - ebay use a redirection url, so it sends you to either my ebay or whatever else they want you to see after you sign in. Some clever criminals have picked up on this and are exploiting it.

Its made all the more convincing because you have to sign in, even using ebays own security certificate, before you are transparently redirected to the fake site,

For example, the following url will take you to the bbc after you sign in:

https://signin.ebay.com/ws/eBayISAPI.dll?SignIn&UsingSSL=1&pUserId=&ru=http://servlet.ebay.com/ForumController?dest=http://www.bbc.co.uk

So, again - never click a link in an email if it involves anything to do with an account of any kind.

cookiemonster25

but thats just what you have asked us to do !!!!

danmanchester

Hmmmmmmm...if anyone clicks that link don't sign in! Better safe than sorry.
The OP's advice may be useful but looks dodgy to me.

soolin

I'm moving this to the spoof email sticky as it doesn't appear to be materially different from the spoof emails we are already reporting. They all ask you to sign in through a real looking ebay site but direct you elsewhere.

Soo

TheChillPill

No, this is totally different to the normal ones - this actually *does* use the real ebay, thats why you need to be so careful.

As for the link, it's perfectly harmless - although I didn't make it a clickable link so you could see it in full, looks like the forum software has changed it for me though.

motorguy

I know there are warnings going about all the time, but i thought this one was just a little bit different.

Just got an email from 'ebay', 'question for seller' type. Asking some strange question about postage on an item. I was suspicious as i am not currently selling anything. Also item number doesn't exist if you check in ebay.

However everything else about the email looks genuine. Even down to the link to the item in question, which of course prompts you for your username and password on an ebay like screen, then throws you back to https://www.ebay.co.uk.

Obviously a way of getting ebay user ids and passwords, but if you were a regular seller you may not spot it in time...

The title just read 'Question for item #5784504408' and at first look seems genuine...

Even the link to ebay.co.uk at the bottom of the email sends you elsewhere.

Just thought i'd warn you....

nursemolly

beware...another new spoof ebay scam email offering free postage and packaging from ebay.. i have just had an email asking me to register my debit/credit card. it goes on to say it will refund all future postage and packing fees to both buyer and seller.
once again it looks genuine. but please again be careful. do not click!!!!!!

szturc

MarkyMarkD wrote:

No, that is not true. They only know if you've opened an e-mail if they've set it to send a read receipt and you allow that read receipt to be sent. I've never seen this (or virtually never) on spam and certainly never on a phishing e-mail.

Nobody is going to be phished twice - so why would they care if your address is real or not? Either you respond, or you don't.

There is a free programme available from MSGTAG http://www.msgtag.com/home/
which will give a read receipt as soon as the e mail is opened.

There is another free programme called NoSpyMail available from http://www.p-i-s.com/down_links.php?count=12%20&&%20down_id=6 which will block any attempts by others to use MSGTAG type read notifications. It's worth installing just to see the number of people and organisations that send you tagged e mails. For instance all e mails from E Bay are tagged.

Regards,

Alan Wood.