EcommerceBytes Letters to the Editor Letters to the Editor
Your emails to EcommerceBytes
For consideration, send your email to ina@auctionbytes.com with "Letters to the Editor Blog" in the subject line! Remember to include your name as you would like it to appear in the blog.
Tue Aug 28 2012 09:52:04

Beware of New eBay Shipping-Label Fraud

By: Reader

Sponsored Link

Dear Ina,
I request AuctionBytes to alert eBay sellers on a new type of ongoing online fraud:

I recently became a victim of this new type of fraud. My eBay account was hacked from an unknown source, presumably overseas, and 14 Express Mail international labels worth $1688 were printed on August 21.

I called eBay while the hacker was still printing USPS Express Mail International labels through my eBay account. When I called, until then, only 3 labels were printed but while I was being shunted from one department to another, 11 more were printed until the eBay Safety department asked me to immediately change my eBay password.

I was asked to void the labels which I immediately did. I have since been tracking those numbers and I find 8 of the 14 packages submitted to various USPS centers throughout the country and these packages are on the move now. USPS has "rejected void" on the submitted packages and eBay is still quiet on the reimbursement issue.

I may mention here that I have also reported the matter to Inspector General of USPS through their hotline form and even the Internet Fraud dept of FBI. None of them have reverted to me so far.

I have researched the modus operandi of these thieves. They doctor these shipping labels and super-impose their own addresses. The labels are then used to get the stolen merchandise out of the country.

Generally unsuspecting innocent people are offered home-based jobs. Merchandise stolen through credit card fraud is first got delivered to their addresses, then these guys are expected to use the "pre-paid" shipping labels to get the merchandise delivered to the thieves in far off countries. The victims are offered lucrative compensation which they never receive.

I am not happy with the way eBay has handled the issue so far. I believe they should have acted faster and escalated the issue to a higher level. They were slow and the five agents I spoke to didn't appear to have a clue of what was going on. They saw no suspicious activity in my account even when the hacker was busy doing his job. They thought by just voiding the labels, I'd get back my money, whereas as an experienced shipper, I know that once a label is scanned at any USPS center, there's no refund.

I am hoping eBay compensates my losses as it was their website which was compromised.
L.

Update 8/31/12: eBay provided its stance and suggestions on unauthorized account access:

EBay actively monitors eBay for signs of unauthorized account access and other forms of internet fraud. If a customer suspects that someone knows his or her user name and password, we recommend they change their password and take steps to secure their identity.

A customer concerned with unauthorized account access should:
* Contact eBay immediately
* Change the password on the eBay account and the personal email account associated with the eBay account
* Change the secret question and answer on the account
* Verify the contact information on the account to make sure it has not been changed

Additional information may be found in the eBay Security Center, including tips on how to avoid unauthorized account access.

The best way to deter unauthorized account access is to be familiar with phishing emails, as they are the primary method of gaining sensitive information like user names and passwords. - Link to eBay Phishing Tutorial.

Comments (37) | Leave Comment | Permalink
Readers Comments

Perminate Link for Beware of New eBay Shipping-Label Fraud   Beware of New eBay Shipping-Label Fraud

by: Moonwishes This user has validated their user name.

Wed Aug 29 12:58:54 2012

Why is anyone using ebay/PP to print their postage. How much more money do you want to hand over to them so that they can screw you? Try places like endicia, stamps, etc. for your postage and take away anything that ebay can profit from even a little.

Perminate Link for Beware of New eBay Shipping-Label Fraud   Beware of New eBay Shipping-Label Fraud

This user has validated their user name. by: Basset

Wed Aug 29 13:18:26 2012

Now don’t nobody laugh. I’ve had minor issues with my main computer I use for eBay & while in the shop, the guy fixing it, installed new security.

Well, guess what the new security software thinks is malicious! eBay’s label system. Although I can print labels just fine on my back-up computers, the new security software on my main laptop says: “No, unh-uh – We are NOT going THERE!”.  The computer fixer guy tried fixing it remotely, No dice! Today I took it back to him to work on face to screen. Still working on it. Makes ya wonder!

Perminate Link for Beware of New eBay Shipping-Label Fraud   Beware of New eBay Shipping-Label Fraud

This user has validated their user name. by: Tula

Wed Aug 29 14:53:17 2012

I wonder if it's possible to disable shipping label printing on our accounts? Knowing eBay, I doubt it, but this would be a useful feature to have.

Perminate Link for Beware of New eBay Shipping-Label Fraud   Beware of New eBay Shipping-Label Fraud

by: Tiffee Jasso This user has validated their user name.

Wed Aug 29 19:39:07 2012

To begin with the Post Office has a stop package service. Their is also the Customs people to notify of stolen I.D. and illegal merchandise. Since the money was removed from your Paypal account that is where you need to file a fraud complaint against Ebay who took the money.  

Perminate Link for Beware of New eBay Shipping-Label Fraud   Beware of New eBay Shipping-Label Fraud

by: rifshen This user has validated their user name.

Wed Aug 29 21:07:27 2012

I am the victim who opened this forum. Now the latest:
Ina Steiner of AB contacted Ryan Moore at eBay Public Relations and then things started rolling on ebay. They accepted breach, secured my account 8 days after the incident and transferred all fraudulant transactions to the Paypal Dispute Resolution Center and now I guess, I have to wait for completion of their investigation.

In the meantime, I was tracking the progress of those packages which were submitted at 8 different USPS centers spread over the continental US. They have progressed only to the airports but none of them has so far left the country.

Responding to some of the bloggers here, let me clarify: I am not likely to fall victim to phishing emails. I have enough experience to trash them immediately. This must have been a more sophisticated intrusion.

Trusted ebay sellers receive a deep discount of nearly 30% on dmoestic priority mail shipping when they print their labels through ebay, which is far more than the standard 5%. You don't get much if your package is is just one pound but over that weight, it's quite tempting to use ebay even if you are a subscriber of stamps.com, endicia etc.

I wasn't the only victim of this fraud. One other victim has just posted before me. I have seen a couple more on an ebay forum, all victimized during the same period.

Salute the power of the electronic media and thank both Ina Steiner and Ryan Moore.

Perminate Link for Beware of New eBay Shipping-Label Fraud   Beware of New eBay Shipping-Label Fraud

This user has validated their user name. by: Philip Cohen

Thu Aug 30 04:56:01 2012

@rifshen

Gee, do you think that you could get Ryan Moore to do something about the blatant shill bidding fraud being committed by eBay seller, eDropOff, and the commercial shill bidding ring in which she is involved, both of which are now being knowingly aided and abetted by eBay by eBay’s taking of no action in this blatant, rampant, shill bidding matter.

Or, Could you post Ryan Moore’s contact details, please.

eBay / PayPal / Donahoe: Dead Men Walking

Perminate Link for Beware of New eBay Shipping-Label Fraud   Beware of New eBay Shipping-Label Fraud

by: trickstunt This user has validated their user name.

Thu Aug 30 07:48:57 2012

Glad you got some positive resolution and I hope the other victims do to.

But ebay still gets a failing grade, for spontaneously, automatically blaming the victims, for not having any type of public announcement, and for not handling similar/same type of cases equally.

How many more victims will be blamed? I suspect that anyone who doesn't "make noise" or have some liaison for inside contact will be out of luck.

Maybe some paid forum trolls can call them liars and thieves and stalked the way other victims/critics have been?

Is ebay/paypal prepared to accept that they are compromised and make a statement? If not, their words and deeds aren't worth jack squat.

And for anyone concerned about visiting unsafe urls, check google safe browsing tool for www.ebay.com. It still shows as having malware, trojans and drive by downloads. Ha!

http://bit.ly/nxPGZe


Perminate Link for Beware of New eBay Shipping-Label Fraud   Beware of New eBay Shipping-Label Fraud

by: trickstunt This user has validated their user name.

Thu Aug 30 07:50:29 2012

One last thing, did they offer any explanation as to how your account was accessed?

Perminate Link for Beware of New eBay Shipping-Label Fraud   Beware of New eBay Shipping-Label Fraud

This user has validated their user name. by: Bad Hair Day

Thu Aug 30 10:37:57 2012

@grandma_fish
''I never used eBay to print my shipping labels,I always printed directly through PayPal. But I think if you print them through eBay, it's automatically linked to your PayPal account and I don't think you get prompted for a PayPal password. Am I correct?''
Yes, you are correct grandma_fish! I have always printed my shipping labels through PayPal and have never had a problem. I just recently started printing them through eBay because it was easier...one less step of having to log in to my PayPal account. I WILL NOT be printing my labels through eBay in the future thanks to the OP!

Perminate Link for Beware of New eBay Shipping-Label Fraud   Beware of New eBay Shipping-Label Fraud

by: rifshen This user has validated their user name.

Thu Aug 30 18:44:23 2012

@Moonwishes: I have a stamps.com account and that's where I do my batch printing of shipping labels. I use eBay shipping only for those shipping labels where I get a deep discount of 30%.

@trickstunt,  I do not have contact details of any eBay official. This contact was made by AB.

Perminate Link for Beware of New eBay Shipping-Label Fraud   Beware of New eBay Shipping-Label Fraud

by: nikkor This user has validated their user name.

Mon Sep 3 19:23:20 2012

You can search for scammer userid's and emails on www.ruscammer.com, like the current ongoing with prebbiebeadman

Perminate Link for Beware of New eBay Shipping-Label Fraud   Beware of New eBay Shipping-Label Fraud

by: Carol This user has validated their user name.

Thu Sep 6 10:10:31 2012

This is the first time I've heard of a deep discount of 30% on priority packages of over 1# if printed through ebay.

Can someone explain if this applies to all sellers, TRS only, if you have to sign up for it or qualify in some other way???

Perminate Link for Beware of New eBay Shipping-Label Fraud   Beware of New eBay Shipping-Label Fraud

by: Nofraud18 This user has validated their user name.

Fri Sep 28 08:01:16 2012

Ok wtf is going on here! After being taken for over 1,700 as a seller only shipping in the u.s.! I have had international shipping labels printed for hundreds of dollars for the same items I sold the month before. I changed my wifi account and every single account I have used to sell anything on the 19th of sept 2012. And yet eBay still let these sleaze balls  purchase more shipping labels. Thank goodness because I reported it or my bank also that they refused it and reported it to me right away! I am hearing more and more of this on several sites. EBay tried to tell me I must have been in Russia or Canada printing labels, which I told them they were no help at all,. I filed a complaint with PayPal who I found out that eBay now ownes bagan to refund me my money back but still 700 short. No more shipping thru eBay, rather do it directly! But where does it stop?? How can I trust to sell with them again? Thanks to my bank who contacted me and refused their Paypal transaction, how many others have been ripped off without the knowledge of how to fight back! Where does it stop??

Perminate Link for Beware of New eBay Shipping-Label Fraud   Beware of New eBay Shipping-Label Fraud

This user has validated their user name. by: permacrisis

Mon Oct 1 09:45:19 2012

It was probably a keylogger. Always assume there's one installed, and do the following for a shark-infested login:

When typing passwords, type them out of order.

1. Set your mouse pointer at the start of the text entry field. (Leave it there for the remainder of this procedure.)

2. Type the LAST part of your password.

3. Click the mouse button. This will put the cursor back to the home position.

(DONT use the Home, arrow keys, or any keys. They can read off your keyboard but they can't see the screen.)

4. Type the MIDDLE part of the password.

5. Click the mouse button again.

6. Type the FIRST part of your password.

7. Click 'Submit'-  DONT hit enter.


Break it up the same way every time. If you break your password up the same way each time, they will think that the scrambled version is really your password. If you keep doing it differently,   then eventually the bad guys will put 2 + 2 together, and reconstruct your actual password.

Naturally, you should clean out your computer, but this works in a jam.

Perminate Link for Beware of New eBay Shipping-Label Fraud   Beware of New eBay Shipping-Label Fraud

by: vanilaise This user has validated their user name.

Mon Oct 8 11:03:49 2012

Both my friend and I have been victim to this fraud in the last week!!!!... I can not figure out WHat the scam is.. they go into your account and print a label from an item you sold last week, and looks like I sent an International Shipping label to the previous party but says ''Russian Federation'' under the persons address in New jersey... I told Ebay they better escalate this ASAP!

Perminate Link for Beware of New eBay Shipping-Label Fraud   Beware of New eBay Shipping-Label Fraud

by: gr8Digz This user has validated their user name.

Wed Oct 24 15:18:25 2012

I was just hit a week ago, they printed 32 labels for over $2700. I immediately voided the labels and disputed the transactions in Paypal but neither Ebay or Paypal are helpful. I found a link to a billing agreement (that I  didn't even know I had) in Paypal under the postage detals, click on it to end the billing agreement between Ebay and USPS. Change your passwords. There is no help from Ebay or Paypal and USPS moves very slowly so I would recommend contacting the bank that is your backup funding source. They'll do a real investigation. I'm still trying to figure out how the got my info. MalwareBytes found a trojan that Norton missed, I'm guessing that was it. It's so obviously fraud, Ebay needs to take a more active stand in preventing this. http://forums.ebay.com/db2/topic/Trust-Safety-Safe/Hacker-Used-My/5200
105458

Perminate Link for Beware of New eBay Shipping-Label Fraud   Beware of New eBay Shipping-Label Fraud

by: Hollister530 This user has validated their user name.

Thu Nov 29 00:33:46 2012

This happend to me yesterday. They are hacking into eBay accounts and purchasing shipping labels so they can cash them in for the refund. Pay pal was ok to deal with but ebay didn't seem to care at all.  

Click to view more comments
1 2 


Login is required to post comments.
To sign in to leave a comment, fill in the form below. If you have not yet signed up for AB Verify, or if you'd like more information, go to the Registration Page
.

Login for AB Verify
Be sure and use your email address and password to log in.

 
Email:
Password:
 
 Forgot Your Password?
 Even though you are signed in with the AuctionBytes Blog, you will have to sign in to the EcommerceBytes blog. But you can sign in with your existing AB Verify info.