Protect Auction site Identity !

[srtiwari]

After 5 yrs. of using the site very carefully, have now (probably) had ID Hijacked ! Can't log in, and the Password/Secret question/address are all rejected. "Live chat" couldn't help and have now reported to their Trust and security setup. Will have to wait and see what they do.
Am furious - in part with myself. Can't imagine how this happened. Can never be careful enough. Hope there will not be other consequences of this. Anyone know what else I can/should do ?

😡 and 😱

Subhash

 

[clintock]

I'm not sure what the exact right thing to do is, and obviously neither does ebay, or it would not be so easy to hijack accounts.
Reporting to the trust and security thing is good, also I'd search frequently or if there is an automatic way to search for any new auctions that show up using your account name. If you find any, report it as fraud quick so ebay can pounce and delete the auctions before your account name is sullied..

I really think all ebay needs to do to prevent this sort of thing is simple;
password changes must be verified by a telephone call or email, originating from the phone number (caller ID, like the credit card companies use) or email address where they send you a code that you have to return, thus verifying the person trying to change passwords has access to the email account that is on file before the password change request.

 

[drewbarb]

Did you recieve an email at some point from another ebay member asking you about an auction which was not yours? I have had a few of these, and responded to the first one, only to have my account compromised. I was lucky- I logged in immediately and changed my password, and managed to keep it, but the lesson is never click links in suspicious messages. Hope you get this sorted out.

 

[oscroft]

Yes, inform eBay of the hijack, and then keep and eye on any new auctions that are listed in your name and report those too (and if eBay doesn't remove any such auctions quickly, I'd also be tempted to register a new account and bid very high on them to prevent someone being defrauded).

 

[colyn]

After 5 yrs. of using the site very carefully, have now (probably) had ID Hijacked ! Can't log in, and the Password/Secret question/address are all rejected. "Live chat" couldn't help and have now reported to their Trust and security setup. Will have to wait and see what they do.
Am furious - in part with myself. Can't imagine how this happened. Can never be careful enough. Hope there will not be other consequences of this. Anyone know what else I can/should do ?

😡 and 😱

Subhash

In all probability you either answered an email saying you need to update your account information or you received an email from a supposed bidder asking a question that you logged into from the email itself. NEVER do this..

Another remote possibility is that a key logger has been placed onto your computer because you either don't have virus/spyware protection or you haven't updated to pattern file recently. Run a virus/spyware scan..

Never answer a question unless you go to your ebay account and log into there. If it is a fake question you won't find it in My eBay.

And NEVER update any information unless you are doing so after opening a new browser and logging directly into your ebay or paypal account.

If you use paypal you also need to log in and change your password to be safe.

Most people blame ebay when they are compromised..but ebay has no control whatsoever over how you respond to such situations...

 

[colyn]

I really think all ebay needs to do to prevent this sort of thing is simple;

eBay already has the simple solution which will prevent these hijacks. Log into your account from a new browser NOT from email..this way you are on a secured page..you give the hijacker your information by falling for these email scams not ebay..

password changes must be verified by a telephone call or email,

Both are insecure methods..When you log directly into your account from ebay not email you are on a secure page..

 

[srtiwari]

Colyn, as far as I can remember, I have never responded to an email "from ebay" by clicking on the link. In fact, I have reported spoof emails to ebay several times. AND I have spyware/antiVirus (curent) on my machine. Thats why I'm so confused and mad.
And I have changed passwords in other places.
Anything I can do NOW re: the account itself ? And how can the account be misused ? BTW, I don't know that there is away to search for any postings/bids under my ID. Can I be liable for this ??

 

[shadowfox]

Keep pestering eBay. They may be slower to respond because they are so big, but they have to have a means to address things like this otherwise they'd be out of business by now.

Let us know what happened.

 

[srtiwari]

Thanks, GreyHoundMan. I did a search and, voila !, it showed my ID and feedback etc. You'd think eBay could do the same and confirm that I have had a genuuine account, instead of the "Live Chat" person being "Unable to find the account" . Amazing !
Of course, I still can't log in, and have yet to hear from "Trust and Security".
And, yes, currently "I" have no items for sale/auction.

Subhash

Subhash

 

[srtiwari]

Thank Goodness !

Turns out someone had been trying to break into the account, and eBay had "suspended" the account. Part of it was my fault 🙂o ) as I have travelled a lot the last few yrs, and moved between the US and New Zealand, and could not correctly give my (now outdated) addresses/phone nos. etc. to the eBay people.

Per the advice by ShadowFox, I "pestered" ebay again, and this next "Live Chat" finally got me correctly identified, and so they are sending me a temporary password soon.
My reason for posting this is that it seems to indicate that ebay does appear to hav reasonable protection system- (or is this just my relief and gratitude talking ?)
They also have a great Fraud protection Tutorial on their site, and advised me to use the excellent tools on my browser (Firefox) toolbar.
Thank you all for your help and support.

Back to the GAS now, I guess.

Subhash 🙂

 

[colyn]

Colyn, as far as I can remember, I have never responded to an email "from ebay" by clicking on the link.

What about a question from a person asking a question about your item? This is another way in which hackers can obtain your info..you don't even have to have a current auction in order to get one of these..they are sent out at random just like the spam emails. You answer and when supposedly logging in to your account to answer you give your ebay information..

Anything I can do NOW re: the account itself ? And how can the account be misused ? BTW, I don't know that there is away to search for any postings/bids under my ID. Can I be liable for this ??

You can do an advanced search by clicking the link in the upper right corner but to do so you have to be logged in..

Keep asking ebay for up to date info on how they are coming in their investigation. Do it every day till it is resolved.

Since they already know you cannot be held liable..