Ebay Listing on my account - but not my listing?? Fraud?

Scope · 18 Apr 2019 at 15:17

I've just had an email from ebay to say my listing is now live.. Apparently I am selling a Chromecast..

Im not.. I appears somebody might have gotten access to my account (not sure how?), and listed an item for sale using my account.. But why??

Subsequently I have had an email from Ebay to say:

"Unauthorized use of your account -- action required"

Along with the listing, which they have removed.. (I also ended it as soon as I saw it, along with a password change)..

My question again, what would anybody gain from listing something from my account? I am unable to check my paypal link, as Ebay has already removed it for security reasons..

CREATIVE!11 · 18 Apr 2019 at 15:22

Go quickly and contact ebay...

Happened to me, they listed and sold 100's of winter coats.... was a nightmare to get them all off my account.

Also set up 2FA.

Edit: What they do is sell loads of fake listings and get the money out of paypal before they catch on whats going on.

d_brennen · 18 Apr 2019 at 15:22

Scope said:
Im not.. I appears somebody might have gotten access to my account (not sure how?), and listed an item for sale using my account.. But why??

To make a sale and presumably not send the goods, in your name. Was your username and password easy/used elsewhere? You can check your email against the https://haveibeenpwned.com/ database.

Scope · 18 Apr 2019 at 15:23

I have reset my password and enabled 2FA.. im hoping the email from ebay means its triggered something at their end.

CREATIVE!11 · 18 Apr 2019 at 15:24

d_brennen said:
To make a sale and presumably not send the goods, in your name. Was your username and password easy/used elsewhere? You can check your email against the https://haveibeenpwned.com/ database.

Also this.

Don't play around OP, I went through this headache....

CREATIVE!11 · 18 Apr 2019 at 15:24

Scope said:
I have reset my password and enabled 2FA.. im hoping the email from ebay means its triggered something at their end.

With 2fa you should be ok.

But i'd also change email passwords etc to be safe at this point.

d_brennen · 18 Apr 2019 at 15:27

CREATIVE!11 said:
With 2fa you should be ok.

But i'd also change email passwords etc to be safe at this point.

2FA is great and a massive pain. Got no less than 3 2FA providers for work and need to authenticate all the damn time :mad:

I use a password manager and have it auto fill everything I use. Most of my passwords (except here) are 8-32 character long nonsense generated by said pw manager. If they ever get hacked, I will go back to pen and paper

Scope · 18 Apr 2019 at 15:28

I had a couple of fraudulent transactions on my paypal account a few months ago.. Cant remember if they charged the password or not..

ShortWarning · 18 Apr 2019 at 15:44

Exactly the same thing happened to me a week or so ago. They put their paypal address in so money would go to them.

I contacted ebay and they sorted it out for me.

Ysmalari · 18 Apr 2019 at 15:53

Seen this from the other side as I found a game I was looking for listed cheaply (too cheap in restrospect) and made the purchase.
Fortunately I purchased through Paypal and Ebay halted the transaction just half an hour later reporting that the sellers account had been compromised.

Scope · 18 Apr 2019 at 15:55

I've just spoken to Ebay and he could see what had happened on my account. He told me as I had 2FA enabled I shouldnt worry about it happening again..

We will see..

Thanks for the responses I've had.

d_brennen · 18 Apr 2019 at 15:57

Scope said:
I've just spoken to Ebay and he could see what had happened on my account. He told me as I had 2FA enabled I shouldnt worry about it happening again..

We will see..

Thanks for the responses I've had.

I'd still change all your passwords and check the link I posted with any email address you use. If someone got into your eBay account, what other accounts do you hold that could be compromised?

MartinPrince · 18 Apr 2019 at 16:13

Yeah I had the same thing happen a while back. Some guy in the States apparently. I changed to a more secure password (it wasn't that good in the first place) and I've had no problems since then.

You see this thing all the time with 'too good to be true' prices of popular products like Samsung SSD's. I checked my email address on that site and unsurprisingly I got 7 hits and 1 paste.