Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Warning about clever eBay phish scam

4 views
Skip to first unread message

Frank Provasek

unread,
May 29, 2011, 4:07:46 PM5/29/11
to
I received this email today:


From: "eBay Member: ronnieboy" <ronnieboy...@members.ebay.com>
Reply-To: ronnieboy...@members.ebay.com
To: fr...@frankcoins.com
Subject: Re: Other: ronnieboy sent a message about 1904 Liberty $20
Gold NGC MS64 #110692675598

Hello Frankcoins

I have been on your auction : http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItem&item=110692675598

1904 Liberty $20 Gold NGC MS64
and I want to bid on your and something is wrong because when i try to
find out how much is the shipping United Kingdom it shows 2899$ which
is the starting price.
Please e-mail me back with the shipping costs .

Thanks !

The first thing I did was clink on the Link to look at my auction, and
the Ebay login screen appeared. But the Link actually goes to
http://www.rogatica.net/album/themes/engines/phptemplate/awut/
which is a fake ebay login site.

I almost fell for it since it referenced my ebay name, a valid item
and item number that I currently have for sale.

It raised my suspicion that they formatted the dollar amount as 2899$
instead of $2899, otherwise I most likely would have been victimized.

Disinterested Bystander

unread,
May 29, 2011, 7:42:39 PM5/29/11
to

"Frank Provasek" <fr...@frankcoins.com> wrote in message
news:f630ea54-aac9-4dea...@j28g2000vbp.googlegroups.com...

Don't you know better than to click on a link in an email?
My grandchildren know better than that!
How long have you been online? 20 minutes?


"Roßert G. Schaffrath"

unread,
May 30, 2011, 8:15:55 AM5/30/11
to

Was it an HTML formatted message? Just curious because with this plain
text message the eBay link works (yes I use a sandbox to test such
things). I suspect they followed the same logic as various PayPal scams
as well. Display a valid link but <A HREF> it to a bogus link.

Frank Provasek

unread,
May 30, 2011, 10:06:26 PM5/30/11
to
On May 30, 7:15 am, "Roßert G. Schaffrath" <rschaffr...@yahoo.com>
wrote:

>
> Was it an HTML formatted message?  Just curious because with this plain
> text message the eBay link works (yes I use a sandbox to test such
> things).  I suspect they followed the same logic as various PayPal scams
> as well.  Display a valid link but <A HREF> it to a bogus link.- Hide quoted text -
>
Yes.

By the way, Ebay didn't appreciate me warning the members of the eBay
Coin and Paper Money Discussion Board...
(of course, it matters not that I posted no user's contact information
or email address)


Hello frankcoins,

We appreciate your participation in the eBay Community Forums. This
email is to
notify you that we are revoking all privileges for posting in eBay
Discussion
Boards, Chat Boards, and the Answer Center for a period of thirty (30)
days, for posting
the following:


I wanted to warn everyone about a phishing email that seemed legit
since it
used my name and details from an actual auction I am running:

Subject: Re: Other: ronnieboy
sent a message about 1904 Liberty $20 Gold NGC MS64
#110692675598

Hello Frankcoins

I have been on your auction : <a href="http://cgi.ebay.
com/ws/eBayISAPI.dll?ViewItem&item=110692675598" target="
_blank" rel="nofollow">Link</a>

1904 Liberty $20
Gold NGC MS64
and I want to bid on your and something
is wrong because when i try to find out how much is the
shipping United Kingdom it shows 2899$ which is the starting
price.
Please e-mail me back with the shipping costs .


Thanks !

The first thing I did was
clink on the Link to look at my auction, and the Ebay

login screen appeared. But the Link actually goes to <a
href="http://www.rogatica.
net/album/themes/engines/phptemplate/awut/" target="
_blank" rel="nofollow">Link</a>


which is a fake
ebay login site.

I almost fell for it since
it referenced my ebay name, a valid item and item number
that I currently have for sale.

It raised my
suspicion that they formatted the dollar amount as 2899$
instead of $2899, otherwise I most likely would have been
victimized.


Your post was removed for the following reason:

Including another individual's contact information and/or email
address in a
post. For clarification of this policy, please visit this page:
http://forums.ebay.com/db2/thread.jspa?threadID=410492039


During this sanction, you may continue to bid and list, and you will
be able to
start posting again after 30 days. However, it is important that you
do not
register and/or use an alternate User ID to post on or sign into any
eBay
Discussion Board, Chat Board, or the Answer Center during this
sanction. Doing
so is a violation of the terms of this sanction, the Board Usage
Policy, and the
eBay User Agreement, and can lead to an indefinite sanction of your
account(s)
and/or a suspension of your eBay account(s), which removes your buying
and
selling privileges.

Once your board sanction is over, we respectfully request that your
future board
activities comply with our guidelines

Thank you in advance for your cooperation in this important matter.

Again, we value your participation in the forums, and we appreciate
your support.

Regards,
Azarel
eBay Moderation Team

Dave Farmer

unread,
May 31, 2011, 4:56:36 AM5/31/11
to


sure wish there was another eBay....

Dave

mazorj

unread,
May 31, 2011, 6:19:49 AM5/31/11
to

"Frank Provasek" <fr...@frankcoins.com> wrote in message
news:8f93b1ed-177f-4329...@q32g2000yqn.googlegroups.com...


Hello frankcoins,

Hello Frankcoins


Thanks !

==========================

So they have the time and resources to hunt down and punish a minor and
arguably necessary technical infraction of their posting rules, but blatant
crooks and liars routinely posting counterfeits, etc. for sale go unnoticed?

I'd say "Penny wise, pound foolish" but someone would ignore the historical
context and ding me for not calling it a "cent".
;-)

0 new messages