My Ebay account was hacked

[BillyCarpenter]

On Friday, I got an email that showed I had purchased 2 iphones and each one cost over a $1000.00. I logged into ebay and the shipping address for the phones had been changed to some town in Iowa.

I was then alerted that my google account had been logged into from another state.

I contacted both ebay and my bank and put a stop on the charges. I changed all of my passwords and security questions. I cancelled my credit card and will be issued a new one.

This freaked my out. I wonder how they did it?

[bsm2]

Re: My Ebay account was hacked

When your password is Billy1234

[BillyCarpenter]

Re: My Ebay account was hacked

I've been trying to get to the bottom of my Ebay account being hacked. Here's what I've learned.


1. They were able to log into my Ebay account and order 2 iphones that cost over $1,000 each.

2. When I logged into my Ebay account the purchases didn't show up. They had been moved to the "hidden" file.

3. They managed to change the shipping address to their shipping address.

4. I had an unauthorized log in to my google account.

5. Ebay sent me a copy of a "chat" that one of their reps had with the scammer that was posing as me.


I spent over an hour at my bank getting the charges reversed. Ebay wasn't a lot of help. Luckily, I caught the fradulant puchases almost immediately. Otherwise they may have gotten away with it.

Scary.

[bsm2]

Re: My Ebay account was hacked

DON'T worry I am sure it wasn't the Russians

Wow an hour on the phone you know you could have file a dispute online in 5 minutes

Just saying

[BillyCarpenter]

Re: My Ebay account was hacked

DON'T worry I am sure it wasn't the Russians

It's a little early in the morning to be drinking, Bradley.

[KenB]

Re: My Ebay account was hacked

I've been trying to get to the bottom of my Ebay account being hacked. Here's what I've learned.


1. They were able to log into my Ebay account and order 2 iphones that cost over $1,000 each.

2. When I logged into my Ebay account the purchases didn't show up. They had been moved to the "hidden" file.

3. They managed to change the shipping address to their shipping address.

4. I had an unauthorized log in to my google account.

5. Ebay sent me a copy of a "chat" that one of their reps had with the scammer that was posing as me.


I spent over an hour at my bank getting the charges reversed. Ebay wasn't a lot of help. Luckily, I caught the fradulant puchases almost immediately. Otherwise they may have gotten away with it.

Scary.

Good thing you caught it in time. Not everyone is lucky or savvy enough to do that.

Nothing is safe or sacred thee days.

[Gift]

Re: My Ebay account was hacked

Something related happened to me, too but my account has been used for selling game consoles LOL - fortunately noone has been ripped off because ebay automatically detected that this was suspicios.
I think this was partially "on me" because at that time I knew that my mail provider got hacked (log in data of many customers got stolen). I changed my password for email but I was too lazy to change all other kind
of accounts that used the same passwort so it was easy to gain access via some trial and error ... yeah I know, one shouldn't use one password for different stuff...

You should change all log in credentials, especially if you are using the same password for different sites and for beeing double-safe: Enable 2 factor authentification for stuff like amazon, ebay, e-mail, paypal...

[BillyCarpenter]

Re: My Ebay account was hacked

Something related happened to me, too but my account has been used for selling game consoles LOL - fortunately noone has been ripped off because ebay automatically detected that this was suspicios.
I think this was partially "on me" because at that time I knew that my mail provider got hacked (log in data of many customers got stolen). I changed my password for email but I was too lazy to change all other kind
of accounts that used the same passwort so it was easy to gain access via some trial and error ... yeah I know, one shouldn't use one password for different stuff...

You should change all log in credentials, especially if you are using the same password for different sites and for beeing double-safe: Enable 2 factor authentification for stuff like amazon, ebay, e-mail, paypal...

Thanks for the tip. I didn't know ebay had 2FA. I just set it up. Thanks again.

[copier tech]

Re: My Ebay account was hacked

This is very worrying.

So basically are you saying they managed to gain access to your eBay account simply by calling/chatting with an eBay rep impersonating you that enabled them to reset/change your password & gain access etc!?

[BillyCarpenter]

Re: My Ebay account was hacked

This is very worrying.

So basically are you saying they managed to gain access to your eBay account simply by calling/chatting with an eBay rep impersonating you that enabled them to reset/change your password & gain access etc!?

No, I don't thnik that's the case. I'm not sure how they gained access to my ebay account. I did receive an email from ebay that included a transcript of a conversation they had with the scammer. The conversation pertained to shipping information of the iphones that they fraudantly ordered.

[BillyCarpenter]

Re: My Ebay account was hacked

Here's the chat transcript:


Escalation from eBay Helpbot
2022 - 10 - 10
01:36:38 UTC Diana
Hi, my name is Diana, please allow me a few moments to catch up on your conversation so far.
01:36:50 UTC Diana
I see you opened this account 16 years ago, thank you for your loyalty
01:37:01 UTC Diana
May I know how would you like your concern to be resolve?
01:37:09 UTC kej52467
hello, my phone was lost, I am writing to you from my girlfriend, my account is ***********
01:37:40 UTC kej52467
can you tell me what is wrong with my order 01-09197-57214
01:38:05 UTC kej52467
my name is Billy
01:39:38 UTC Diana
For security purposes can I first have the phone number associated on the account?
01:40:57 UTC kej52467
of course ************
01:41:05 UTC kej52467
min
01:41:42 UTC Diana
Sure, take your time
01:43:32 UTC kej52467


01:43:59 UTC Diana
How about the first and the last name of the account owner?
01:44:13 UTC kej52467
Billy Carpenter
01:44:59 UTC Diana
Thank you so much for the information that you provided, this purchased was done 8th of August and the item is Apple iPhone 13 Pro Max - 256gb - Factory Sealed - Factory Warranty - Unlocked!
01:45:34 UTC kej52467
yes
01:46:17 UTC Diana
Thank you so much. May I know how would you like your concern to be resolve?
01:46:37 UTC kej52467
i want to know the status
01:46:57 UTC kej52467
and tracking number if the purchase has been shipped
01:47:39 UTC Diana
I will be happy to assist you. Let me check what we can do to get this resolved quickly.
01:47:58 UTC kej52467
thanks
01:49:06 UTC Diana
Based on the information that we have it here on the file unfortunately it seems that the seller have not start shipping the item since there is no tracking number yet that was been uploaded.
01:49:50 UTC kej52467
is this item also 01-09197-56873?
01:50:25 UTC Diana
Yes, you are correct
01:50:52 UTC kej52467
I am so sorry. Thanks
01:50:55 UTC
Chat ended by kej52467

[BillyCarpenter]

Re: My Ebay account was hacked

Obviously that wasn't me in the Chat.

[copier tech]

Re: My Ebay account was hacked

Thanks for sharing. However I guess this doesn't help you understand how your account was 'hacked'

One point to note, personally I have connected eBay in the past & they do great you exactly the same way "I see you opened this account 16 years ago, thank you for your loyalty"

In my case 13 years.

[slimslob]

Re: My Ebay account was hacked

I will not use Ebay. Their customer database gets hacked on a regular basis and they do not report it to their users unless a news outlet finds out and reports it. If you are going to use eBay for shopping, do not store any credit card or bank information in your account. If you are a vendor on eBay, set the account used for receiving payments to immediately send both text and email alerts for every transaction. Some can even be setup to automatically delete any charge transaction that you do not confirm within a set number of minutes

Lately Pay Pal has also been hit with hacks recently.