Reporting spoof (fake) emails
Spoof emails are deceptive emails claiming to be sent by well-known companies. They are called "spoof emails" (also known as "hoax" or "phisher" emails) because they fake the appearance of a popular website or company in an attempt to commit identity theft. The people who send these emails hope that unsuspecting recipients will reply or click a link contained in the email and then provide confidential information (for example, eBay passwords, bank account or credit card numbers).
To help us protect your eBay account and your identity:
Learn to recognise characteristics of spoof email.
Know what to do when you receive suspicious email.
Report suspicious email to eBay.
Protect yourself from spoof emails and possible eBay account takeover and identity theft.
An email message from eBay:
Never asks you to provide bank account numbers, passwords, or other confidential information through email. If eBay requests information from you, a copy of that email will be in the My Messages box in My eBay. For more information, see Using My eBay.
Does not require you to enter information on a page that cannot be accessed from the eBay site. When possible, you should avoid clicking links. Instead of clicking the link, you should copy the address and paste it into the Address/Location area of your web browser. While we may send email that contains links, the links are provided for convenience only. You will not be required to submit confidential information if a direct link is provided to an eBay page.
Will not include attachments. If you receive a message that appears to have been sent from eBay that includes an attachment, do not open it.
May be a misdirected "Forgot your password" message. These messages are sent when a member enters a User ID using the "Forgot your password" feature. After the User ID is entered, a notice is sent to the email address registered to that account. If you received this email unexpectedly, it is probably because someone else mistyped their own User ID when attempting to use this feature.
Typical characteristics of spoof email
The following characteristics are warning signs that the email you received may not be legitimate.
Uses eBay terms, department names and often includes the eBay logo to resemble common eBay email.
Has a generic greeting like “Attention eBay Member.”
Often includes a forged eBay address in the "From" line of the email. For example, "From: firstname.lastname@example.org", "From: email@example.com", "From: eBay Account Maintenance." Just because the sender line includes “ebay”, does not guarantee that the email is from eBay.
Contains threats of account suspension or urges quick action. Subjects can include problems with your account, Ask the Seller a Question, or offers to become an eBay PowerSeller.
Includes a request to provide personal information, to verify your password, or to confirm account information.
Contains links to web pages that look exactly like eBay sign-in pages.
What to do when you receive suspicious email
Do not send sensitive personal information using email. We will never ask you to send your account password or other confidential information, such as credit card numbers, in an email.
Never click on a link in an email if you are unsure of its origins, especially if the email asks for personal financial information. The purpose of spoof email is to lead you to a website and attempt to collect personal information and commit identity theft or other crimes.
When in doubt, go directly to the eBay website. Open a new browser window, type in the address of the eBay site on which you registered, sign-in, and use the "site map" link to navigate to where you want to go. For more information, see Recognising Fake eBay Websites. Make sure you sign out when you are finished, especially if you are using a public computer.
Report the email by forwarding the email to firstname.lastname@example.org or email@example.com.
Monitor your account for suspicious activities. Your account may have been compromised. eBay also monitors suspicious account activity and will contact you about changing your password.
Important: If you have already replied to a fraudulent email with sensitive personal information or entered data through a fake web page, you need to take immediate steps to protect your eBay account (see Securing Your eBay Account and Reporting Account Theft) and your identity (see Protecting Your Identity).
Reporting spoof email
If you have any doubt whether an email is from eBay, help us to keep our community safe by reporting it immediately.
To report suspicious email:
Use your email program to forward the message to firstname.lastname@example.org or email@example.com.
Important: In order for us investigate your report fully, you must forward the email without adding attachments, adding text or altering text.
Once you have forwarded the email, you can delete it from your email account.
Protecting yourself against spoof email and websites