[an error occurred while processing this directive]
BBC News
watch One-Minute World News
Last Updated: Monday, 17 January, 2005, 17:40 GMT
eBay users face fake e-mails risk
eBay has confirmed that the email problem does exist
Online auction house eBay has confirmed reports that some of its users have been hit by spam e-mails that may be able to gain their account details.

eBay said the problem was industry-wide, and that its sites were as secure as possible.

The scam targets eBay users with infected spam or mail-shot e-mails.

If the e-mails are opened, they can record what keys the user types and send the details back to the criminals behind the spam mail shots.

How the scam works

The method, known as 'key logging', allows the fraudsters to find the eBay user's exact password, the National Hi-Tech Crime Unit (NHTCU) has confirmed.

Internet fraud is an industry-wide issue and we would encourage everyone to regularly update their virus detection software
eBay spokeswoman

A spokeswoman for the NHTCU said the agency would not be making any further comment.

Once they have gained access to users' accounts, the criminals can steal from them in a number of ways.

Firstly, they can pretend to be a seller and inform the eBay users that one of their specific recent failed bids has, after all, been successful, and ask for payment.

The goods in question obviously never appear.

Fraudsters can also use an eBay user's account to buy an item put up for sale by one of their criminal associates.

The way for users to avoid getting trapped by key logging is to ensure their computer's virus protection software is up to date.

In addition to infectious spam e-mails including the 'key logging' software, more simple e-mail scams have also been targeting eBay customers.

These generally work by the using fake e-mails purporting to be from eBay which ask for users to reconfirm their log-in details.

Popularity brings problems

"Internet fraud is an industry-wide issue and we would encourage everyone to regularly update their virus detection software," said an eBay spokeswoman.

"As part of eBay's on-going commitment to trust and safety, we work extensively with official online fraud experts such as the NHTCU to fight internet fraud."

The spokeswoman added that eBay has an entire section of its site dedicated to informing users about best safety practice.

A number of banks and credit card customers have already been targeted by both fake emails and key-logging infections, but criminals are believed to have moved on to target eBay because of the auction house's giant popularity. It lists two million auctions every day.

Cyber crime booms in 2004
29 Dec 04 |  Technology
Spam e-mails tempt net shoppers
10 Dec 04 |  Technology
Cyber criminals step up the pace
06 Dec 04 |  Technology
'Phishing' scam targets NatWest
17 Nov 04 |  Business
eBay cleans up online
21 Oct 04 |  Business

The BBC is not responsible for the content of external internet sites


News Front Page | Africa | Americas | Asia-Pacific | Europe | Middle East | South Asia
UK | Business | Entertainment | Science/Nature | Technology | Health
Have Your Say | In Pictures | Week at a Glance | Country Profiles | In Depth | Programmes
Americas Africa Europe Middle East South Asia Asia Pacific