Random eBay seller store opened

[utbooklady]

I haven’t even logged into or used eBay since March, and I was just a buyer. It has been at least 3 years (probably longer) since I have sold ANYTHING on eBay.

Suddenly, this morning, I’m getting an email from eBay saying I successfully changed my account type from individual to business, opened an eBay store AND subscribed to a fee based service to be a seller... which will cost me a monthly fee. **bleep**?! 
My account is 100% secure. As I said I haven’t even used eBay in 3 months. I wasn’t worried about my account being hacked and I’m still not, but I changed my PW anyway. I’ve cancelled my “subscription” (that I never signed up for), and eBay says I’ll be charged fees for my store (that I didn’t create) until July 1 (for a store I didn’t ask for that was open for maybe 40 minutes).

I just find this whole thing very bizarre. 
Did this / has this happened to anyone lately? 

[utbooklady]

Thanks for this, great info! I’ve already done many of these things, but not all of them, so will do the rest. 

I just don’t understand why someone would hack my account... and open a store?! .... why not buy something? Lol it’s so asinine. Anyway, thanks

[a_c_green]

---

@utbooklady wrote:

Thank you! Great info, much appreciated. I already have 2 factor, that’s how I knew about the store so quickly. Was opened and closed in 27 minutes. 

---

The two-factor authentication is a good practice. Nevertheless, it appears that they did manage to get into your account anyway. Was your eBay password possibly used in some completely-different on-line account elsewhere? The weak point may not be eBay, but some other site on which you also have an account.

One common practice among scammers, once they have found a working password someplace, is to immediately launch login attempts on other major websites in case the victim used the same password someplace else, especially on sites that allow users to log in with their email address.

[comics-scifi-collectibles]

---

@utbooklady wrote:

Thanks for this, great info! I’ve already done many of these things, but not all of them, so will do the rest. 

I just don’t understand why someone would hack my account... and open a store?! .... why not buy something? Lol it’s so asinine. Anyway, thanks

---

You're welcome.  🙂  You might have caught it quickly enough that they just didn't start listing items for sale right away. 

[fashunu4eeuh]

You can always go directly to eBay’s Security Center. The link is on most eBay pages. From there you just follow the prompts to report a possible hacking. They will direct you to the correct dept and resources. Good luck.

https://pages.ebay.com/securitycenter/index.html

[utbooklady]

UGH. I hadn’t considered that possibility. Guess I better get moving changing all my passwords and such on every online account I have. Thanks!

[valueaddedresource]

---

@utbooklady wrote:

Thanks for this, great info! I’ve already done many of these things, but not all of them, so will do the rest. 

I just don’t understand why someone would hack my account... and open a store?! .... why not buy something? Lol it’s so asinine. Anyway, thanks

---

@utbooklady  - I'm glad you are taking steps to protect your account.  As to the why use a hacked account for selling instead of buying, it can be a highly lucrative way for them to turn stolen credit card info into cash.  The triangulation fraud we are dealing with is using compromised accounts to do just that.  They hit us for about $50K in a little over a month, and I guarantee we aren't the only ones they have used in the fraud.

They create listings for products they don't actually have and when they sell that item on eBay, they go to a direct retail website and "drop ship" the item to their eBay buyer using a stolen credit card for that side of the transaction.

Their eBay buyer is none the wiser and even usually leaves positive feedback because they get the item they ordered, usually at a pretty nice discount from regular retail.  The retail website has no idea until the chargebacks start rolling in.

This article is from 2015, so it's not a new scheme by any means, but eBay seems to be seeing a recent increase in this type of fraud using compromised accounts. https://krebsonsecurity.com/tag/triangulation-fraud/

[valueaddedresource]

https://community.ebay.com/t5/My-Account/eBay-changed-account-type/m-p/30991003#M72018

https://community.ebay.com/t5/My-Account/Account-hacked/m-p/30986391#M71956

[valueaddedresource]

@utbooklady  - just curious if you've been able to get things sorted out as far as the store subscription?

I've read a few reports on Twitter from people in the UK who have recently had there accounts compromised and used for selling that eBay is saying they owe seller fees and is sending them emails threatening legal action. 

I hope eBay has been a little more helpful for you.