Ebay scam mail

hoosier21
hoosier21 Posts: 4,413
edited April 2024 in Clubhouse Archives
Is it just me, or is everyone getting a bunch of emails from scammers acting like they are Ebay? They are very good at what they do, the emails look real, and I am sure they fool a bunch of people.

Just wondering
Dodd - Battery Preamp
Monarchy Audio SE100 Delux - mono power amps
Sony DVP-NS999ES - SACD player
ADS 1230 - Polk SDA 2B
DIY Stereo Subwoofer towers w/(4) 12 drivers each
Crown K1 - Subwoofer amp
Outlaw ICBM - crossover
Beringher BFD - sub eq

Where is the remote? Where is the $%#$% remote!

"I've always been mad, I know I've been mad, like the most of us have...very hard to explain why you're mad, even if you're not mad..."
Post edited by RyanC_Masimo on
· Share on FacebookShare on Twitter

Comments

  • bobman1235
    bobman1235 Posts: 10,822
    edited March 2005
    Haven't gotten one in a while, but I did get a few a while back. They are VERY believable, and I, who work in the computer industry and am inherently aware and careful of such things, was almost fooled in a moment of weakness, I can' t imagine someone not very computer savvy handling it well.

    It seems like these people would be easy to catch, though. I suggest some sort of vigilante alliance....
    If you will it, dude, it is no dream.
    · Share on FacebookShare on Twitter
  • PolkThug
    PolkThug Posts: 7,532
    edited March 2005
    I get lots of fake Washington Mutual emails. I have a loan with Wamu. I alerted them, but they said there is nothing they can do about it.

    I would think it would be easy to track the culprits but maybe not. I feel sorry for the people that fall for it
    Never Forget
    · Share on FacebookShare on Twitter
  • hoosier21
    hoosier21 Posts: 4,413
    edited March 2005
    had the link checked by the our company's computer guy (they always give you a super secret special link) and it goes overseas, so what can anyone do? Nothing.
    Dodd - Battery Preamp
    Monarchy Audio SE100 Delux - mono power amps
    Sony DVP-NS999ES - SACD player
    ADS 1230 - Polk SDA 2B
    DIY Stereo Subwoofer towers w/(4) 12 drivers each
    Crown K1 - Subwoofer amp
    Outlaw ICBM - crossover
    Beringher BFD - sub eq

    Where is the remote? Where is the $%#$% remote!

    "I've always been mad, I know I've been mad, like the most of us have...very hard to explain why you're mad, even if you're not mad..."
    · Share on FacebookShare on Twitter
  • bobman1235
    bobman1235 Posts: 10,822
    edited March 2005
    Originally posted by hoosier21
    had the link checked by the our company's computer guy (they always give you a super secret special link) and it goes overseas, so what can anyone do? Nothing.

    There must be an American with guns somewhere in that country, right? :)
    If you will it, dude, it is no dream.
    · Share on FacebookShare on Twitter
  • rnp614
    rnp614 Posts: 598
    edited March 2005
    when I clicked on the link of the most recent one, my antivirus went off...otherwise I wouldnt have known. Except I was rather suspicious of the IP address that shows up before the ebay part. How is it that these things come from ebay.com emails?

    Just to get things straight, the email I got says that my account has been suspended (but it hasnt). What did all yours say?
    · Share on FacebookShare on Twitter
  • bobman1235
    bobman1235 Posts: 10,822
    edited March 2005
    Originally posted by rnp614
    when I clicked on the link of the most recent one, my antivirus went off...otherwise I wouldnt have known. Except I was rather suspicious of the IP address that shows up before the ebay part. How is it that these things come from ebay.com emails?

    Just to get things straight, the email I got says that my account has been suspended (but it hasnt). What did all yours say?

    Spoofing a return address is EXTREMELY easy. If you look at the acutal headers to the email, you can see where it really came from. Obviously no one would ever do this for most emails, but... if you ever have a doubt, the information's there.

    The basic rule is, always make sure if you get an email from a company you do business with, go to that company's website rather than clicking on any links in emails. If your account had been suspended, I'm sure when you signed into ebay there would be some message telling you so.
    If you will it, dude, it is no dream.
    · Share on FacebookShare on Twitter
  • rnp614
    rnp614 Posts: 598
    edited March 2005
    yeah now I know :o

    Learn something new each day I guess :D
    · Share on FacebookShare on Twitter
  • Polk65
    Polk65 Posts: 1,405
    edited March 2005
    I'm flooded with them. About 1-2 every couple of days. All were pretty much the same for about 6 months:
    "Your Washington Mutual Account has been suspended"
    "Your PayPal account has been suspended"
    "Every now and then we ask our members to verify their accounts - Please login here with your password"
    "Third warning notice of intent to suspend your account"

    New ones in the past month:
    "Your PayPal account has received 65,322 login attempts"
    "Question From eBay Member" - When are you gonna send me the item i ordered?
    "Question From eBay Member" - Are you still interested in my item?
    "Update notice from ..... bank"

    I used to forward this crap to ebay but have given up. As fast as the spammers can send them, they create a dozen more new addresses.
    Just hover your mouse over the link before you click and you can usually tell immediately it's spam.
    I've changed my email address this week, hopefully that will reduce some of it.
    · Share on FacebookShare on Twitter
  • Tour2ma
    Tour2ma Posts: 10,177
    edited March 2005
    I still forward those that get through my spam filter (surprised at the number that do get filtered).

    Got a very legitimate looking one not too long along claiming to be from PayPal and claiming that my account had been hacked. Forwarded it to PayPal, and it turned out to be a spoof, but that one spooked me.
    More later,
    Tour...
    Vox Copuli
    Better to remain silent and be thought a fool, than to open your mouth and remove all doubt. - Old English Proverb

    "Death doesn't come with a Uhaul." - Dennis Gardner
    "It's easy to get lost in price vs performance vs ego vs illusion." - doro
    "There is a certain entertainment value in ripping the occaisonal (sic) buttmunch..." - TroyD
    · Share on FacebookShare on Twitter
  • petrym
    petrym Posts: 1,912
    edited March 2005
    I've gotten these emails from "EBay" and "Washington Mutual" as well. I used Visualroute to find out where the IP addresses are located. I traced a few of these to South Korea and Romania -- definitely not good!
    · Share on FacebookShare on Twitter
  • beardog03
    beardog03 Posts: 5,550
    edited March 2005
    I also have been getting them...

    I`m thinking about stayin away from the bay for awhile..

    I almost bit last time.....

    If I hadn`t been warned by Doro just the day before.......
    Cary SLP-98L F1 DC Pre Amp (Jag Blue)
    Parasound HCA-3500
    Cary Audio V12 amp (Jag Red)
    Polk Audio Xm Reciever (Autographed by THE MAN Himself) :cool:
    Magnum Dynalab MD-102 Analog Tuna
    Jolida JD-100 CDP
    Polk Audio LSi9 Speaks (ebony)
    SVS PC-Ultra Sub
    AQ Bedrock Speaker Cables (Bi-Wired)
    MIT Shotgun S1 I/C`s
    AQ Black Thunder Sub Cables
    PS Audio Plus Power Cords
    Magnum Dynalab ST-2 FM Antenna
    Sanus Cherry wood Speak Stands
    Adona AV45CS3 / 3 Tier Rack (Black /Gold)

    :cool:
    · Share on FacebookShare on Twitter
  • petrym
    petrym Posts: 1,912
    edited March 2005
    Just got another one from "Charter One Bank" This one is in a jpeg/gif format made to look like text so the entire email is clickable. It traces to the Netherlands IP 193.138.230.4 http://charterone-com.cx.la INFO ONLY: Don't visit!

    It uses a redirect from an Microsoft MSN site in Seattle to the server in the Netherlands.
    · Share on FacebookShare on Twitter
  • SDA SRS 1.2
    SDA SRS 1.2 Posts: 255
    edited March 2005
    I fell for one of those PayPal "we need your updated account info" fakes year before last when I first started getting them. A few days later while working at the computer I got an email, "Thank you for withdrawing $1800 from your PayPal account," and before I could even finish reading that one, another email pops up and says, "Thank you for withdrawing $600 from your PayPal account." I was on the phone in a heartbeat with PayPal who closed the account and denied the funds. Turned out to be some kid in Germany who was trying to buy computer equipment with my money! Boy, did I learn my lesson! :eek:

    Robbie
    Main System: Polk SDA SRS 1.2 Speakers, Sunfire Signature 600~two Amp, Carver C-16 Preamp, Carver TX-11b Tuner, Marantz 6350Q TT, Philips CDR-775 Recorder, Teac V-707RX Cassette Deck, Signal Cable Double Run Speaker Cable

    Upstairs Den: Marantz 2325 Receiver, Marantz 5220 Cassette Deck, Marantz HD-880 Speakers, Marantz 6370Q TT

    Exercise (Kabuki speaker) Room: Kenwood KR-9600 Receiver, Pioneer CS-99a Speakers, Sansui SP-X9000 Speakers (not pretty, but LOUD! :) )
    · Share on FacebookShare on Twitter
  • madmax
    madmax Posts: 12,434
    edited March 2005
    I just received cash!!! $52. Fake paypal email. It looked just like the real thing! Of course I checked my account and there was nothing there.

    Bastages!
    Vinyl, the final frontier...

    Avantgarde horns, 300b tubes, thats the kinda crap I want... :D
    · Share on FacebookShare on Twitter
  • fireshoes
    fireshoes Posts: 3,167
    edited March 2005
    Never ever ever log into something through an email. If you need to visit the site, go directly to it. The legit companies will never have 'confirm your account' or 'verify your password.'
    · Share on FacebookShare on Twitter
  • petrym
    petrym Posts: 1,912
    edited March 2005
    Here's a new one I just got. It says "You have just received a virtual postcard from a family member!" The link is: http://www2.postcards.org/?a91-valets-cloud-31337 but it's a cover for http://www.pozebalan.go.ro/postcard.gif.exe :( -- not good!
    · Share on FacebookShare on Twitter
  • swerve
    swerve Posts: 1,862
    edited March 2005
    if the links not good why would you post it?
    cats.vans.bag...
    · Share on FacebookShare on Twitter
  • petrym
    petrym Posts: 1,912
    edited March 2005
    hi swerve,
    I posted it as an example to show that the link you see isn't actually what you get. I disabled the "Automatically parse URLs:" function (located below in the options section when you post) so nobody could casually click it and get caught. You'll notice that the underlying function of the URL is to download/execute an exe file.

    I was trying to give an example of a bad situation that the unaware user could get into. A lot of these executables turn your computer into a zombie that generates spam on a massive scale.

    Just trying to inform, that's all.
    · Share on FacebookShare on Twitter
  • beardog03
    beardog03 Posts: 5,550
    edited March 2005
    petrym , fireshoes and all you guys...

    I appreciate all the tips and heads up you can give / find..

    It`s always something out there, and if your not paying attention, and sometimes even if you are, you get caught up in something and click and then you realize it`s fake....it`s too late...

    ebay scams are very real looking...
    even if you read all the fine print, if you have no experience with them you wouldn`t know better...

    except you usually find a phrase , or term that seems odd, or is put in street terms...

    gotta be careful what you open, or where you go these days
    Cary SLP-98L F1 DC Pre Amp (Jag Blue)
    Parasound HCA-3500
    Cary Audio V12 amp (Jag Red)
    Polk Audio Xm Reciever (Autographed by THE MAN Himself) :cool:
    Magnum Dynalab MD-102 Analog Tuna
    Jolida JD-100 CDP
    Polk Audio LSi9 Speaks (ebony)
    SVS PC-Ultra Sub
    AQ Bedrock Speaker Cables (Bi-Wired)
    MIT Shotgun S1 I/C`s
    AQ Black Thunder Sub Cables
    PS Audio Plus Power Cords
    Magnum Dynalab ST-2 FM Antenna
    Sanus Cherry wood Speak Stands
    Adona AV45CS3 / 3 Tier Rack (Black /Gold)

    :cool:
    · Share on FacebookShare on Twitter
  • Polk65
    Polk65 Posts: 1,405
    edited March 2005
    Here's an update. I changed my email address with eb & pp just over a week ago. Made a few purchases, and have received no spam yet. Meanwhile my old eb & pp email account continue to receive spam every few days.

    Here's another verified source of spam. Whenever I get one of those "free greeting card" pictures from someone, tons of spam always follow. This really sucks, because the other person had good intentions, yet has opened a huge can of spam on you.
    · Share on FacebookShare on Twitter
  • rnp614
    rnp614 Posts: 598
    edited March 2005
    I got a spam GAP.com one today! Its ridiculous! It told me to add some email address to my address book so I could continue to receive the promo emails.
    LIKELY STORY! :rolleyes:
    · Share on FacebookShare on Twitter
  • Polk65
    Polk65 Posts: 1,405
    edited May 2005
    Originally posted by Polk65
    Here's an update. I changed my email address with eb & pp just over a week ago. Made a few purchases, and have received no spam yet. Meanwhile my old eb & pp email account continue to receive spam every few days.

    2 months later...

    Same story. My new email address has received zero spam and the old one continues to get new spam every few days.
    · Share on FacebookShare on Twitter
  • wingnut4772
    wingnut4772 Posts: 7,519
    edited May 2005
    Ebay wants you to forward these to 'spoof@ebay.com'. That is their fraud department. I have sent them about 20 of them.
    Sharp Elite 70
    Anthem D2V 3D
    Parasound 5250
    Parasound HCA 1000 A
    Parasound HCA 1000
    Oppo BDP 95
    Von Schweikert VR4 Jr R/L Fronts
    Von Schweikert LCR 4 Center
    Totem Mask Surrounds X4
    Hsu ULS-15 Quad Drive Subwoofers
    Sony PS3
    Squeezebox Touch

    Polk Atrium 7s on the patio just to keep my foot in the door.
    · Share on FacebookShare on Twitter
  • janmike
    janmike Posts: 6,146
    edited May 2005
    Places like PayPal should and will address you by name. If you receive an e-mail addressed to "Dear PayPal Member" or something along that line, it is fake. I think ebay will also address you by name instead of "ebay member." I have reported many of these back to Paypal in their fraud section.
    Michael ;)
    In the beginning, all knowledge was new!
    NORTH of 60°
    · Share on FacebookShare on Twitter