May 16, 2004

what would you do if you received an email like this?

We got this in our email address today:

Dear (your email here)
During our regular update and verification of the accounts, we could not verify your current information. Either your information has changed or it is incomplete.

As a result, your access to bid or buy on eBay has been restricted.

According to our site policy you will have to confirm that you are the real owner of the eBay account by log in and verify your identity or else your account will be suspended without the right to register again with eBay.

Click on the link below in order to login and verify your information:

Verify Information

Thank you

eBay Customer Support

Looks official, doesn't it? When you click through, it opens the main page in a window... and what looks like an ebay sign-in page in the second. If you enter your information on the second page, you get a one page "information verification" form that asks for things like your credit card number, your PIN number for the credit card, and social security number!

Suffice it to say... this isn't part of ebay. It's an information harvesting site being run by some kind of unscrupulous identity thief. But, this was about the most realistic ruse I've ever seen. You have to be ABSOLUTELY certain that you are on the right web page whenever you enter personal information. Look for the little lock symbol at the bottom of your browser so that you know it's a secure site, and then look at the address bar and make sure you're on the site you think you're on. If you're at all in doubt, DON'T enter your information. Call, write, or look for another site!

No comments: