I just got a very convincing spoof email. Here's the first part of it:
"Due to recent activity, including possible unauthorized listings placed on your account, we will require a second confirmation of your identity with us in order to allow us to investigate this matter further.Your account is not suspended, but if in 48 hours after you receive this message your account is not confirmed we reserve the right to suspend your eBay registration. If you received this notice and you are not the authorized account holder, please be aware that it is in violation of eBay policy to represent oneself as another eBay user. Such action may also be in violation of local, national, and/or international law. eBay is committed to assist law enforcement with any inquires related to attempts to misappropriate personal information with the intent to commit fraud or theft. Information will be provided at the request of law enforcement agencies to ensure that perpetrators are prosecuted to the fullest extent of the law."
I just dumped over $1200 worth of cards on eBay, which is uncharacteristic of my account, so I thought it was legit. It had a pretty convincing site linked to it as well, but the link didn't have ebay.com anywhere in it, only an IP address.
And then the email said "eBay will request personal data (password, credit card/bank numbers, and so on) in this email." So I clicked forward,
Spoof@ebay.com. But I thought you all should know.
Feel free to move this to whatever forum thought best.
Peace,
The Soup