Over the years fraudsters have become very crafty. So much so that some very big sellers have had account take-overs, only for a very short time and Ebay is quick to remedy the problem.
I helped design the (My Messages) part of Ebay as a way to put a stop to Spoofs, aka Fake Emails designed to get the receiver to click a link and enter their passwords.
Since My Messages has came into full use Fraudsters have had to become even more bold. They will go to a sellers auctions, spot an active auction and who is bidding on it. Then they will design an Ebay web site that is identical to your listing and make it appear as though an active bidder has sent you a message. I almost fell victim to one but their question just didn't fit well with the item they inquired about so I forwarded it to spoof@ebay.com. It was indeed an attempt to get my computers internal address.
Tips on staying secure:
First, I always keep my Email on Full Headers, it will show in every email the exact server where the email originated. Most spoofs show (nobody at ebey.com) something that is a dead give away, one can also go into your messages in Ebay and see if the email showed up there. It is also a good idea to just use your (My Messages) to reply. If, in your email, the full headers showed something suspicious Always forward the message to spoof@ebay.com and they can verify it. They have a big team of investigators and thats what they are there for.
Fraudsters are also using what I call Inciting Anger email messages. They will call you a fraud and they paid for the item and are gonna report one to the FBI etc...Just forward it to spoof@ebay.com don't fall victim and reply.
There is also the ploy of (Scaring) the reader. An email may state (Urgent, Possiable Account Takeover, click link below!!!) Samething goes for Paypal to, except send these emails to spoof@paypal.com .
These guys can take a replied email and steal your computers internal ID address and from there you would be amazed at what the can do. If you already replied to one, report them, get into your account ASAP and change your password.
A good rule of thumb is, when in doubt REPORT IT. If it turns out to be a legit email, all is cool and no one finds out you ran a check on them.
What Happens when an Acct is taken over
I have had 2 close friends have an account take-over. Both lost access to their Ebay for a few short agonizing hours. The perps will usually start listing Buy It Nows Digital stuff mostly, they want the high dollar Fast sells. Thankfully both friends had their accounts restored before anyone got ripped off.
In summing up, Use full headers on your emails and learn to read them. Always double check your (My Messages) page in your my Ebay.
Never Ever click any link in any emails from Ebay or Paypal NEVER!!! No matter how legitimate it looks. Always check with Ebay first, thru your (My Messages) or spoof@ebay.com
Also Use (My Messages to reply to inquires.)
Visit Ebays information page for further advice on spotting spoofs at the Security Center.
Thanks and Happy Ebaying!!!!!!!!-Dale Rhode aka rhodescabbin