X

eBay fights back against phishers

Auction company sets up free, private mail service in attempt to derail scam artists using its good name.

Stefanie Olsen Staff writer, CNET News
Stefanie Olsen covers technology and science.
Stefanie Olsen
2 min read
eBay has moved to squelch spoofed e-mail bearing its name by introducing a private mail service.

In recent weeks, the online auctioneer introduced My Messages, a free, personalized in-box for eBay customers that contains communications only sent from eBay. That way, members can be sure to avoid spam in disguise or phishing scams designed to lure people to a fake eBay Web site in order to capture credit card numbers or other personal information.

"You'll know that the messages you get from eBay are truly from eBay," said Chris Donlay, a spokesman for the online auction company. "This is one way to fight spoof e-mail and phishing."

Phishing is one of the fastest-growing forms of personal fraud in the world. While consumers are the most obvious victims, the damage spreads far wider--hurting companies' finances and reputation and potentially undermining consumer confidence in the safety of e-commerce.

Such scams are a growing headache for companies online, but eBay and its financial payment service PayPal may be among the most targeted because of eBay's brand name and massive marketplace. Financial institutions and online retailers are also the targets of e-mail scammers, according to the Anti-Phishing Working Group.

According to a report from online privacy watchdog Truste, 7 out of 10 people who go online have received phishing e-mails, and 15 percent of those have been duped into providing personal information.

San Jose, Calif.-based eBay has been assertive in fighting scam artists. Last year, for example, the company introduced a security feature for its toolbar that can detect when users are visiting a fraudulent eBay Web site.

Its newest message center, which is the result of member suggestions, is only in the first phase of development and could eventually incorporate member-to-member communications, Donlay said. Future versions have yet to be decided, he said.

Peter Cassidy, secretary general for the Anti-Phishing Working Group, said eBay may lead a trend in the industry toward privatized e-mail services designed to circumvent fraudulent e-mail. For example, he said, the banking industry has already held talks about building a secure e-mail system for customers. But the financial threat of phishing scams has yet to prove large enough to force the industry's hand, he said.

"I'm not surprised that eBay's doing innovative things because they've been phished for nearly five years," Cassidy said.

eBay began notifying some members of the new message center over the weekend.