eBay Spoof email and web page scam
in distribution from
12th November 2003

eBay 'registered users should update their account details!'

One of our site users sent this email in to us on the 12 November 2003. We received it in a text format without the usual display of eBay's own graphics, so be aware that it could come to your inbox looking a bit more convincing.

You should also bear in mind that it is very common for these spoof emails to be redistributed at a later date with only slightly different content. And, once you have received one of these hoaxes, it is also common place to receive at least another one and usually a day or two after the first.

The email suggests (in very bad English - a sure sign of a spoof) that eBay are now requiring users to provide their bank name with their registration information. It goes on to provide a link to a web page for you to do just that.

If you supply that information in the form, and then submit it, the information will be captured utilising PHP script while you are unwittingly sent on to a genuine ebay.com page.

The fake web page is very convincing with the genuine eBay graphics called up from their own servers and even has a small advert for the an eBay Credit Card just to add that extra bit of authenticity to it. The page contains a web form for you to provide personal financial information including ATM Pin, and credit or debit card details.

Take a good look at the following images, because this spoof email scam may be coming to an inbox near you!

The Fake eBay Page...

This fake eBay web page looks like the real deal and even has a small advert for the an eBay Credit Card just to add that extra bit of authenticity to it. But it is clearly apparent that the page is a forgery when you see the URL/web address in your browser's address bar.....

http://200.161.151.54/
which traces back to a Brazilian ISP