Forged eBay email and web page scam
in distribution from
18th October 2003

This forged eBay email has been in distribution from 18th October 2003 and we also have an image of the forged web page that it sends you to. These are just images of the originals, so there is absolutely no code included and none of the links or buttons will now work. The images shown have been reduced to 80% of the original size

The forged email suggests that some eBay account has been blocked due to suspected money laundring and credit card fraud and requests that you update your account information due to a database problem because of this. The email shows a link, but the link is cloaked to look like a genuine eBay link and when clicked on will lead you to a the forged web page.

You should also bear in mind that it is very common for these spoof emails to be redistributed at a later date with only slightly different content. And, once you have received one of these hoaxes, it is also common place to receive at least another one and usually a day or two after the first.

We recommend you read through, look at the images and become familiar with this hoax because it may be coming to an inbox near you soon.

Let's now take a look at the image of the email .....

The hoax web page...

The forged web page looks like a genuine eBay page. It is clearly apparent that the page is forged when you see the URL/web address in your browser's address bar.....

The forged web page has the following URL
http://www.fspot.jp/event/
which is hosted by kagoya.net in Kyoto, Japan.

This forged web page contains a form for you to provide your eBay user ID and password, credit card information, etc...

If you provide this information and submit it, it is captured by the scammers with the use of PHP script (which is a common process in recent hoaxes) while you are sent to the genuine eBay.com home page...