No, I don't mean that ebay is doing it but it's about ebay... I got this email in my junk mail folder in my yahoo email this morning... the email address listed in the to section is NOT mine so I would have been suspect even if I didn't know about the scam.
X-YahooFilteredBulk: X-Originating-IP: [] Return-Path: Received: from ( by mta118.mail.re2.yahoo.com with SMTP; Fri, 08 Oct 2004 01:08:24 -0700 Received: from by ; Fri, 08 Oct 2004 08:57:30 +0100 Message-ID: From: "Ebay Billing Department" Add to Address Book Reply-to: "Ebay Billing Department" To: esmaili_biology@yahoo.com Subject: Urgent Ebay Account Information Date: Fri, 08 Oct 2004 05:58:30 -0200 X-Mailer: QUALCOMM Windows Eudora Version 5.1 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="--7143038204744799" X-Priority: 3 X-MSMail-Priority: Normal Content-Length: 619 Dear valued eBay member, It has come to our attention that your eBay billing updates are out of order. If you could please take 5-10 minutes out of your online experience and update your billing records you will not run into any future problems with the online service. Once you have updated your account records your eBay session will not be interrupted and will continue as normal. Failure to update will result in cancellation of service, Terms of Service (TOS) violations or future billing problems. To update your eBay records click here: httpXXXX://billing.ebay.com/aw-cgi/eBayISAPI.dll?XXXXIn&XXXXXXX eBay Update team http://www.eBay.com
I altered the url so no one would click on it as I am sure it is to try to get someones ebay user id and password. I also decided to show full headers so people could see where it came from.

1 comment:

Kari said...

This is the email I got back form fowarding it to spoof@ebay.com :

Thank you for writing to eBay regarding the email you received.

Emails such as this, commonly referred to as "spoof" or "phished"
messages, are sent in an attempt to collect sensitive personal or
financial information from the recipients.

The email you reported was not sent by eBay. We have reported this
to the appropriate authorities.

In the future, be very cautious of any email that asks you to submit
information such as your credit card number or your email password.
will never ask you for sensitive personal information such as
bank account or credit card numbers, Personal Identification Numbers
(PINs), or Social Security Numbers in an email. If you ever need to
provide sensitive information to us, please open a new Web browser,
www.ebay.com into your browser address field, and click on the "site
map" link located at the top the page to access the eBay page you need.

If you have any doubt about whether an email message is from eBay,
please forward it immediately to spoof@ebay.com. Do not respond to it
click any of the links. Do not remove the original subject line or
change the email in any way when you forward it to us.

If you have already entered sensitive financial information or your
password into a Web site based on a request from a spoofed email, you
should take immediate action to protect your identity and all of your
online accounts. We have developed an eBay Help page with valuable
information regarding the steps you should take to protect yourself.


To review eBay's new tutorial about Spoof Emails, please see the
following Web page:


Once again, thank you for alerting us to the spoof email you received.
Your efforts help us ensure that eBay remains a safe and vibrant online


eBay SafeHarbor
Investigations Team
Your Personal Trading Community (tm)


Important: eBay will not ask you for sensitive personal information
(such as your password, credit card and bank account numbers, Social
Security numbers, etc.) in an email. Learn more account protection tips



Blog Archive