eBay Accounts Hijacked and Used to Scam Buyers
The 'Times Online' is reporting on what seems to be a rash of eBay-account hijackings with a boatload of fraud to match. There are apparently 20 million British eBay registrants, roughly a third of the population, and crooks are taking advantage of many of them by stealing their accounts and posting bogus items for sale. Once a sale is complete, the crooks take off with the proceeds. By stealing another user's account, a fraudster can get around the ratings system that many eBayers use to determine whether a given auction is real or a fake. Auctions may appear to be hosted by a user who has completed many successful transactions, while in reality that user has probably been locked out of their account and has no idea about the auction. The article mentions one account stealer who had snagged over 30 accounts from others and was using them to sell cars, typically the most expensive items brokered on eBay.
The article isn't too specific on how exactly these eBay users' accounts are stolen, but presumably it's accomplished by password-snagging e-mail scams, also known as "phishing." Or if people use really obvious passwords (that include their name, for example, or, the word password), then it's easy for scammers to just guess their way into people's accounts.
Since eBay itself doesn't offer much in the way of protection for buyers or sellers, the "winners" of the auctions may actually find themselves financially duped even worse than the supposed sellers, who only have to get their accounts back and clear their names.
So far, the problem seems to be a bigger deal in the U.K., but there is no reason this same scam can't make its way Stateside, so what can you do? Well, as a seller, you can choose a strong password to keep others from just being able to easily turn your account on you. And, as always, watch out for phishing scams, where official looking e-mails trick you into typing in your username and password on an unauthorized site. If everyone followed these simple guidelines, eBay and other account infiltration scams would be minimized. .
If you're buying anything expensive on eBay, make sure to get in touch with the seller, and, if anything smells shady -- like, they don't really know all that much about the 18-century armoire you're about to buy -- then don't click that "Bid Now!" button.
From Times Online
Related Links:
- Online Scam Targets Xbox Users
- Monster.com Hacked, User Info Compromised
- Online Videos Could Deliver Viruses, Experts Say





Rookie Cop Reportedly Berated, Called 'A Rat' For Arresting Off-Duty Officer
Rodents Run Amok at Upstate New York Walmart
Walmart Ending Membership in Conservative Group
Apple CEO Tim Cook interview at D10: the liveblog
How I Went Bankrupt at 23
Can a New Guy Save Best Buy?
Woman Claims Kangaroo Stalked Her for 2 Days, Then Attacked
Beyonce 60-Pound Weight Loss: Queen B Flaunts New Figure During Comeback Concert Series
I'm A Successful Entrepreneur But Might Get Deported
Facebook, Week Two: Fortunes Made and Fortunes Lost (Mostly Lost)















Comments
65
Subscribe to commentsJimNov 20th 2007 6:57PM
eBay and PayPal are both very helpful when dealing with these problems. The key is recognizing there is a problem and contacting them in a timely manner! Just sending an email to the Security Center usually gets the ball rolling. Biggest thing to do is not jeopardize your accounts in the first place by responding to some idiotic "phishing" scam! Don't be stupid --- be an educated buyer or seller!
KateNov 23rd 2007 9:52AM
What I hated about being an eBay seller is that you CONSTANTLY got scam mail that you had to sent to spoof@. Everyday my mail box was full of it. I got to where I never trusted any mail from eBay, which is a tough way to do buisness when you are an eBay seller. Since closing our eBay store, we've developed a conventional web site. Much easier, safer and MORE profitable then giving our money to eBay with their huge fees and final transaction costs. We closed our store 8 months ago and still eBay has not refunded the $11.50 credit on our account. We have a current address for a check to be mailed to and our credit card is on file. Every month I have to call and ASK for a refund, which never comes. eBay sucks!
MattNov 23rd 2007 12:30PM
PayPal asks you if you want to link your checking account to your PayPal account. I said no because I don't trust PayPal enough to do it. I only link credit cards to my PayPal account and limit my liability for fraudulent purchases to $50 per card.
SteveNov 23rd 2007 8:14PM
What surprises me most of all are the scores of people actually blaming or holding eBay or Papal accountable for the phishing scams out there, as if eBay or Paypal are somehow responsible for not protection users (buyers/sellers) enough. Pass the buck some more why don't you!
I've been buying from eBay for 2 yeras and using Paypal as a merchant and buyer for 4 years and have never had a problem. I just NEVER EVER open anything that claims to come from eBay or Paypal addressed to"Dear Paypal/eBay user". Tha's a dead giveaway right off the bat!
If users would read the security info and act accordingly most phishing scams would dry up, but some people get a scam email and immediately respond, giving the scammers access to all their details ten they blame Bay or Paypal.
Blows my mind sometimes!
A. A. W.Jan 4th 2008 8:41AM
My Ebay was hijacked last year, but I caught it before any malicious activity occured, since I had many live auctions at the time. They reached it through my AOL. I never clicked on a phish, but I did used to access AOL through my cell phone. They plucked the cellphone transmission of my AOL password and used it to ask Ebay for my login info (using the "I forgot" button on Ebay). The most important password is your email password, from there, scammers can get to everything. Lesson learned.