Ebay iPhone Scam
Author
Discussion

sc0tt

Original Poster:

18,294 posts

231 months

Monday 4th June 2018
quotequote all
I've relatively eBay savvy having working in the IT Industry for 12 years but I'm baffled at the below.

Someone appears to have gained access to my partners eBay account. She wouldn't have provided her details in a phishing email.

They have then "commited to buy" an iPhone X but the scammer hasn't gone through with the purchase. Odd because her paypal is linked to ebay and utilises the same password.

All passwords have now been changed but I am baffled at this?

anonymous-user

84 months

Monday 4th June 2018
quotequote all
I had the same a few weeks ago. Chavs trying to buy chav things, but tried to send one item to my house and didn't complete on another. No idea how they managed it. Spoke to eBay and the sellers and managed to sort it all out.

feef

5,209 posts

213 months

Monday 4th June 2018
quotequote all
Check the email and/or password doesn't appear in any of these lists.

https://haveibeenpwned.com/

If it's been leaked as part of a breach elsewhere, you may not need to be phished

echazfraz

772 posts

177 months

Monday 4th June 2018
quotequote all
Happened to me too. They bought some DSLR cameras and some Airbuds. Asked to have them shipped to an address in Scotland and for a brief minute an address in St Petersburg was on the screen also!

I didn't lose anything apart from a few hours of my time on the phone / chat function with ebay/Paypal/Google and changing all of my passwords for all of my accounts as at least two accounts appeared on the list posted. Bloody MyFitnessPal - not only making me feel bad about the calories that I eat but also losing my data.

captain_cynic

17,354 posts

125 months

Monday 4th June 2018
quotequote all
sc0tt said:
I've relatively eBay savvy having working in the IT Industry for 12 years but I'm baffled at the below.

Someone appears to have gained access to my partners eBay account. She wouldn't have provided her details in a phishing email.

They have then "commited to buy" an iPhone X but the scammer hasn't gone through with the purchase. Odd because her paypal is linked to ebay and utilises the same password.

All passwords have now been changed but I am baffled at this?
With any luck they tried, but Paypal utilises a Two Factor Authentication (2FA) system so the wife was sent an email or text asking for authorisation that wasn't answered.

Also I hope there is a lesson in there about password reuse... and they weren't all changed to be the same password (sorry, but like you I work in IT so I cant help but say this).

Otherwise, it seems pretty daft (I mean the crims, not your significant other)... Surely Ebay would have a record of where the phone is posted? Maybe one of them grew a brain and figured out they'd be caught if they mailed a stolen phone to themselves.

sc0tt

Original Poster:

18,294 posts

231 months

Monday 4th June 2018
quotequote all
captain_cynic said:
With any luck they tried, but Paypal utilises a Two Factor Authentication (2FA) system so the wife was sent an email or text asking for authorisation that wasn't answered.

Also I hope there is a lesson in there about password reuse... and they weren't all changed to be the same password (sorry, but like you I work in IT so I cant help but say this).

Otherwise, it seems pretty daft (I mean the crims, not your significant other)... Surely Ebay would have a record of where the phone is posted? Maybe one of them grew a brain and figured out they'd be caught if they mailed a stolen phone to themselves.
No that wasn't set but I have now set it up for her just in case. I think the only potential for this is that her paypal account isn't set to automatically use a debit card, she has to manually send funds to her account. This could be the show stopper.