Ebay "Change passwords"

Mrs Scrungee got an email from HMRC about her tax return, although she doesn't work, has never submitted a tax return and they don't have her email address, but the address still showed as being from @hmrc.gov.uk, so I don't even trust the 'hover' method.

 

"From" email address can easily be faked, however the "hover" display of Links in the email can't (although they can be disguised a bit), so its the links within the email that are worth checking.

If you get an email FROM "HMRC" and the LINKS on "hover" show as www.dodgysite.cn or somesuch then that is a good giveaway ...

 

I did the 'hover' and it still showed @hmrc.gov.uk as in these examples of hmrc phishing emails http://www.hmrc.gov.uk/security/examples.htm

 

If it was a Link (to a website page, not an email address) it wouldn't have had "@" in there - either that or your Email reader is displaying them different to the way that I am used to Outlook showing them.

However - there is a cheeky way of combining two domain names in a Link to make it look like one is legitimate, but it is actually the second one which will be arrived-at if the link is clicked. Should be possible to see both domain names in the Link, but equally it is likely to catch out all the unwary (which will probably be 95% or more of the population). I don't see many Phishing emails use that trick in their links though.

Point to note: don't click them with the intention of THEN seeing what the address is (in your browser). The links usually contain a unique number which is included in the URL you click on, and when you arrive that the site you are basically announcing that "ID=123456 is a real email address and worth selling/spamming lots" :( They of course know which Email address ID=123456 was sent to in the first place :(

 

I just tried to log in to ebay and it won't let me log in unless I agree to change my password!!!!!!!! What rubbish is this? Sod it I'm of to watch telly!!!

Val

 

I got the email this morning ... seems to have been a long time since the news broke for them to get around to sending me an email ...

 

Beware of phishing emails suggesting you also need to change you PayPal password, like this one sent by some pondlife:



I guess loads of scammers are latching onto this ebay hack to get people to change divulge passwords.


P.S. Despite changing my ebay password, I'm starting to get hacked off with the continual messages being displayed telling me to change it.

 

I had a really convincing-looking one a while back, no bad spelling or grammar! I never click links just in case, and go direct

 

Got an email from 'ebay' this morning asking me to change my password (already changed) and sent to an email address that I have never used for ebay, so watch out and always go directly to their website whoever the mail appears to be from.