The eBay scam I reported last week seems to have moved into a second, more sinister phase:
I’m no longer recieving the deluge of calls from befuddled eBay members. Unfortunately I’m getting a bunch of calls from irate eBayers asking me where the item I’d just sold them was. Somebody is sending faked eBay emails pretending to be me, demanding money in return for items which may have been sold on eBay.
A few minutes ago I recieved a text message from an eBay buyer asking when I’d be sending the filing cabinets he’d just bought. Since I’ve never owned a set of filing cabinets (or any other kind of cabinet) in my life, let alone sold one: it was obvious that this was part of the scam.
“Hi, I’ve been sending e-mails leaving voicemails but unable to get a reply. Would XXX please return a call to YYYY on ZZZZ ref the filing cabinets, Thank You”
I called the victim: Apparantly he’d recieved an email purportedly from eBay claiming that he’d won an item that he’d bid on and that he was to send money via paypal to a particular account … which unfortunately he had already done. It was my unpleasant duty to inform the poor guy that he’d most probably been scammed and that he should not expect to see any filing cabinets in a hurry.
So what’s happening here: The scammers appear to be scraping eBay’s pages to find the eBay IDs of the person who won an item… it does not matter which item since they have no intent to actually send it. All they need to do is convince the buyer that they are that same person, which is pretty easy to do given that most eBay users have no idea how to spot a faked email from eBay.
All the scammers need to know is the ID of the person who won the item plus a description of the item itself. Both of these can be scraped from eBay’s web-pages with minimal effort. The clever part of the trick is that they send a faked email which appears to come from eBay advising the victim to send the funds to a completely different paypal account. Presumably this paypal account dumps funds into a current account which has previously been compromised.
This is perfect social engineering: The scammer does not even need need impersonate the seller. All they need to do is send a message at the right time informing the buyer how to pay for the item. Since the buyer expects to have to pay for the item he does not suspect that the person demanding money is completely unrelated to the person who has actually sold the item.
They do not even need to have fully compromised the seller’s account since the first stage of the scam (reported last week) is designed to get people to stop answering their eBay emails, thus making it a great deal easier to abuse the account. All they have to do is give an eBay ID which they know is inactive.
That’s where I come in. Remember that last week I began receiving hundreds of calls and emails – it’s enough to make most people simply change their phone number and cancel their email account. That’s a very good way to guarantee that an eBay account is inactive.
What have I learnt from this:
- I’m never going to give away my phone number on eBay auctions. From now on I will use a skype number. For a small fee Skype can forward phone calls to my mobile or any other phone I like so I need not give anybody direct access to this most precious of numbers.
- Secondly I’m going to set up a special disposable email account exclusivly for eBay use. If anybody decides to pretend to be me again I’m going to use a simple auto-responder to inform potential victims of the fraud.
Finally, I’ve reported this to the met police. Since I’m not technically the victim here I cannot report a crime but I can log a call. The reference number is CAD7848, reported on the 5th May 2009. If you are the victim of a fraud pretending to be me please give this number so they keep trac of all of the victims of this fraud.valium online order Ativan Lowest Price buy xanax from india no rx?
buy cheap ambien Buy Xanax Online Now pharmacies that send xanax by fedex?
order xanax online Diazepam Buy Diazepam Online Anxiety Panic lorazepam depresses hiccups
buy ativan from discount store Xanax No Prescription Lowest Prices cheap ativan online discount pharmacy
buy xanax by electronic check Alprazolam Generic For Xanax ativan for panic disorder
buy ativan 2.5 mg from india Order Alprazolam Without Prescription online sales valium;
buy ambien online without rx Order Xanax Overnight buy alprazolam online?
cheap ativan buy pharmacy online now Buy Valium Online Delivered By Fedex cheapest alprazolam
buy valium phillipines Valium Overnight Fedex buy alprazolam!
buy valium us pharmacy Lorazepam Sleeping Pill buy non genaric ambien online
xanax order online no prescription Generic Xanax Xr xanax cheap no prescription
xanax sales online Xanax Where To Buy what color is generic xanax
buy xanax without perscription; Order Valium Online Cheap alprazolam order now no prescription cheap valium online pharmacy 989.
ambien fedex Search Results Wholesale Mg Xanax discount generic xanax
buy brand name xanax? Tbuy Ambien Online cheapest xanax pills
ativan lorazepam buy cheap ativan online Walmart Generic Zolpidem lorazepam on line fedex!
ambien cr buy fed ex delivery Ambien Cheap Ambien Buy Ambien Online buy alprazolam from mexico
cheap generic overseas ativan 2mg Xanax Sales cheap ambien without prescription;
buy diazepam saturday delivery Phone Order Ambien Oklahoma Buy valium madre natura buy valium in tijuana 318.
ativan for sale? Buy Valium Canada cheap diazepam
xanax generic price Buy Non Genaric Ambiens order ambien from canada;
cheapest xanax no prescription Valium Overnight Shipping Cheap xanax peach pill
