Email scam

[TFU] Thegoon84 · 11 Dec 2013 at 23:16

Had to look twice at this tonight! Maybe its all the wine i drank haha!

Not seen this before, looked really believable

[FnG]magnolia · 11 Dec 2013 at 23:19

Later that night, Tim realised that he actually had been the victim of an unauthorised use of his account and was now facing financial ruin.

Aedus · 11 Dec 2013 at 23:24

A scam? Let me think about this for a second...

estebanrey · 12 Dec 2013 at 00:18

Looks fairly legit to me (and I'm not being sarcastic). Genuine eBay e-mail address (although granted this can be spoofed) and those links are real eBay addresses (although again without hovering over them I can't see if they actually go there).

Also, how can this be a scam? They are advising you to click on "I lost my password" so even if it's a fake site, it would be pretty dumb on the next page to ask you for your current one (which is presumably what they are after).

[FnG]magnolia · 12 Dec 2013 at 00:25

If it is legit then someone needs to learn how to spell "cancelled".

arknor · 12 Dec 2013 at 00:33

usually you can tell by the links when you hover over them

like this link...
Where do you think it goes?
www.google.co.uk

or if they are dumb scammers it won't even be the correct url displayed anyway

I'm guessing pages.ebay is a domain someone registered and not an actual url that's part of ebay?

Like I could probably register
www.store.overclockers.co.uk or www.store-overclockers.co.uk
mirror the website so it looks the same

someone tries to login and types there user/pass

I then have their login info for www.overclockers.co.uk

deko · 12 Dec 2013 at 00:38

[FnG]magnolia;25473613 said:
If it is legit then someone needs to learn how to spell "cancelled".

You're going to lose the battle against American spelling to be honest.

http://pages.ebay.co.uk/help/account/create-password.html#tips

helmet · 12 Dec 2013 at 00:47

Thanks, I won't click this when I get access to your email account.

arknor · 12 Dec 2013 at 00:49

tim harris I'm in your hotmail stealing your emails

Rroff · 12 Dec 2013 at 00:52

I really really wish they'd make the Received field of full headers viewable on the reading screen of more email clients - anyone with even a fraction of a brain can quickly work out if its real or not even before checking if URLs actually go where they say... but no infact many clients seem to try and hide the full header away as much as possible as if they actually want people to fall for scams :|

estebanrey · 12 Dec 2013 at 00:53

arknor said:
I'm guessing pages.ebay is a domain someone registered and not an actual url that's part of ebay?

No it belongs to ebay, http://pages.ebay.com redirects to ebay's homepage.

helmet · 12 Dec 2013 at 00:55

estebanrey said:
No it belongs to ebay, http://pages.ebay.com redirects to ebay's homepage.

Good enough for me, trust it and we'll all click pretty please with calamine lotion.

Deceptor · 12 Dec 2013 at 00:59

You can't register a sub-domain

Eg: xyz.site.tld, you can register xyz-site.tld however.

Energize · 12 Dec 2013 at 01:05

Actually seems legitimate to me, unless the urls don't go to where they say they go to.

Strife212 · 12 Dec 2013 at 01:35

They don't even link to the change password page, it tells you to visit ebay. It seems legit to me.

XE11 · 12 Dec 2013 at 06:55

I think the fact that this email landed in ur inbox means u r being targetted. So regardless, i think u should change the password. Just dont use their link in the email. Type in www.ebay.co.uk directly and change it there because u know u went directly to the offical site and not through random links.

Richie · 12 Dec 2013 at 07:02

As said, without seeing where the links go to, it seems legit to me.

Flukester · 12 Dec 2013 at 07:19

arknor said:
usually you can tell by the links when you hover over them

like this link...
Where do you think it goes?
www.google.co.uk

or if they are dumb scammers it won't even be the correct url displayed anyway

I'm guessing pages.ebay is a domain someone registered and not an actual url that's part of ebay?

Like I could probably register
www.store.overclockers.co.uk or www.store-overclockers.co.uk
mirror the website so it looks the same

someone tries to login and types there user/pass

I then have their login info for www.overclockers.co.uk

I'd like to see you create a sub domain of overclockers.co.uk

That's two people in this thread so far who think they can :-)

scratch · 12 Dec 2013 at 07:31

As others have said, it look pretty legit to me. Did the eBay user ID at the top of the email match yours? Usually the scam emails will say "Dear eBay user" or something similarly generic.

They also don't actually request you change your eBay password by linking you to a fake site..it's all done via text-based instructions.

I would say your account has actually been compromised. Without actually checking the links I can't say 100%, but it doesn't read like your typical scam. To be sure though I wouldn't click on any links in the email and contact eBay customer support from their website instead.

Cosimo · 12 Dec 2013 at 07:34

arknor said:
tim harris I'm in your hotmail stealing your emails

tim harris you've just purchased ten items....