eBay Email to "Protect your account"

[cjsbuyer]

I received a legitimate email from eBay today (and in messages in my eBay account) telling me to help protect my account.  At the bottom of the email was a button that, when clicked, opened the login page to ebay.  While this was a legitimate message, it is no different than what a phishing scam would look like.

eBay's suggestions to avoid phishing scams says they will never send an email asking for security or personal info, but apparently they don't realize sending an email with a link to a page asking for that is the same thing.  Shocking in this day and age that eBay doesn't understand they shouldn't do this.

[donsdetour]

And how are you sure it is a legit message and not a spoof?

[cjsbuyer]

The most certain way is because it also appeared in the Messages within my eBay account.  But that is the point, spoof messages are typically really good at looking real, so eBay should stand firm on the point that they would not ask for this info.  People need to learn to never respond to these types of emails, but it is counterproductive when eBay does send them out.

Other ways to verify, the From email address looked authentic and there were none of the Hello eBay customer type lines.

[sandyc_nh]

I couldn't agree more! I understand ebay's wish to verify that members account information is current, but "training" people to click on links in emails is not the way to go about it. Instead of providing a button linking to their login, simply asking the recipient to login to their account and verify the information is a far more secure process.

[ringydingy22]

I have been selling on eBay for 18 years. Last October I had a message from eBay similar, asking me to change my password, which I did. Then I  was locked out of my eBay account. I went thru hell for 2 months and had to spend at least 200 hours on the phone with eBay trying to get me account figured out. I use a landline so they couldn't send a text with a new code and eBay sent at least 300 emails to send a code but I never received the first email from them. They finally said my account had been compromised so I had to close my account. I had to open a new account in January so lost my power seller and all my feedback for 18 years. I don't recommend opening any messages from eBay or anyone else asking or recommending that you verify your account or change your password. If you wish to do this, do it yourself without going thru messages.

[sroy949]

Not sure WHY eBay does this when they know FULLY WELL that phishing scams ALSO send emails masquerading as eBay emails.

Instead, eBay should do, perhaps, the following if they think it's that important.  They should create a separate easily-identifiable "Protect My Account" icon on the main page and in their emails they should only suggest that the icon is there and not have any link.

[crandallcohn]

Same thing...I am blocked because I thought all those messages were spam. Support is too dumb to figure it out. I have 10 years as a seller locked out because they are so freaking stupid.

'

[zvaresk]

I agree totally. fraud is so prevalent we have to develop healthy habits. The main one being NEVER CLICK ON A LINK. These companies would then be blaming us for nit having been careful enough

[freshani]

I forwarded my email to spoof@ebay.com to ask them if it's real and to say "why are you sending these!!"

[aator_3748]

Dear eBay "security" team: Please stop sending out "Help us protect your account" useless emails that look exactly like a phishing email every month. No other company in the entire world does this so do you really think you are innovating security by doing this? Please re-evaluate with common sense

[cyd_white]

Always check your ebay messages in your account to compare the emails you receive stating it's from from eBay.

Be careful of phishing emails. Usually the scammer's emails have you act with a sense of urgency. Don't be fooled. Send these emails to spoof@eBay.com and don't use any of the phone numbers in google search. Call ebay only on the help & contact page. 

[ransum]

What is more stupid is that they send me this email telling me to log in to keep my account from being removed, and I have clicked "keep me logged in". They offer to keep me logged in, and then tell me I haven't logged in. Who is not not talking to who at eBay corporate? Just plain dumb.