(sorry this is long.. but believe it's worth sharing)
I got an email asking for my username and password (in html
in the email)
I sent it straight to eBay. They responded VERY QUICKLY--
Here was their first response:Thank you for contacting eBay's Trust & Safety Department about an email you received from an address that includes '@ebay.com' but that may not be an authentic email from eBay. We will investigate this situation immediately.
Please be advised that there have been cases where people have attempted to gain access to an eBay member's personal information by sending "spoof" emails. Spoof emails intentionally give the false impression that they have been sent by eBay to solicit people to transmit their account information. Based on your inquiry to eBay's Trust and Safety Department, the email you received was likely a spoof.
eBay is very concerned about spoof email and is taking prompt action to address the issue. If you think you may have entered personal information into a spoof site, we advise you to review the information at the web address below, which contains more detailed information about the following steps:
1. Change your eBay password and email account password
Periodically changing your password is one of the most effective ways to maintain security on any Web site. If you think there is a possibility of a breach in your account security, we strongly suggest that you begin
by changing your password.
2. Forward the email to Spoof@ebay.com
If you haven't already done so, please forward a copy of the email, (which will include the full header), to firstname.lastname@example.org
. Forwarding the email will help us investigate this matter more quickly. Please do not forward the email as an attachment or alter the subject line in any way.For more information on how to identify a header, please visit:
3. Protect your identity
If you entered information such as your social security number or credit card numbers into a web site that you were directed to via a spoofed email, you need to take immediate action to protect your identity. The following web sites have valuable information on the steps you should take to protect yourself:
U.S. Government ID Theft Site:
BBB ID Theft Site:
As we move forward with our investigation, we will contact you if we need further information. In order to dedicate resources to investigating this type of situation, please submit any other questions or concerns through our Help System, which can be accessed by clicking on the Help button at the top of any eBay page.
*Please do not respond to this email as your reply will not be received.If you need to contact us again, please use the eBay Help system.
We appreciate your efforts in helping keep eBay a safe online
eBay Trust & Safety Team
Their response was less than 2 hours:
Thank you for contacting eBay's Trust and Safety Department about email solicitations that are falsely made to appear to have come from eBay. These emails, commonly referred to as "spoof" messages, are sent in an attempt to collect sensitive personal information from recipients who reply to the message or click on a link to a Web page requesting this information.
The email you reported did not originate from, nor is it endorsed by, eBay. We are very concerned about this problem and are working diligently to address the situation. We are currently investigating the source of this email to take further action. You may rest assured that your account standing has not changed and that your listings have not been affected.
We advise you to be very cautious of email messages that ask you to submit information such as your credit card number or your email password. eBay will never ask you for sensitive personal information such as passwords, bank account or credit card numbers, Personal Identification Numbers (PINs), or Social Security numbers in an email itself. If you ever need to provide information to eBay please open a new Web browser, type www.ebay.com,
and click on the "site map" link located at the top the page to access the eBay page you need.
If you have any doubt about whether an email message is from eBay, please forward it immediately to email@example.com
and do not respond to it or click on any of the links in the email message. Please do not change the subject line or forward the email as an attachment.
If you entered personal information such as your password, social security number or credit card numbers into a Website based on a request from a spoofed email, you need to take immediate action to protect your identity. We have developed an eBay Help page with valuable information regarding the steps you should take to protect yourself.
To get to the "Protecting Your Identity" Help page from the eBay site, please click on the "help" link located at the top of most eBay pages and select the following topics when the "eBay Help Center" window appears:
Safe Trading > If Something Goes Wrong > Identity Theft
We encourage you to review additional information about protecting your identity found in the eBay Help system. Please click on the "help" link located at the top of most eBay pages and select the following topics when the "eBay Help Center" window appears:
Safe Trading > If Something Goes Wrong& > Account Theft > Account Protection
Once again, thank you for alerting us to the spoof email you received. Your vigilance helps us ensure that eBay remains a safe and vibrant online marketplace.
A Good Friend will come bail you out of jail, but a True Friend will be sitting next to you saying, "Damn, That Was Fun!!"