eBay takes on phishers with email service

05 Jan 2005 08:53

The auction giant is to set up a secure email service for communicating with its customers in an attempt to shut out the scammers

eBay has moved to squelch spoofed email bearing its name by introducing a private mail service.

In recent weeks, the online auctioneer introduced My Messages, a free, personalised in-box for eBay customers that contains communications only sent from eBay. That way, members can be sure to avoid spam in disguise or phishing scams designed to lure people to a fake eBay Web site in order to capture credit card numbers or other personal information.

Chris Donlay, a spokesman for the online auction company, said: "You'll know that the messages you get from eBay are truly from eBay. This is one way to fight spoof email and phishing."

Phishing is one of the fastest-growing forms of personal fraud in the world. While consumers are the most obvious victims, the damage spreads far wider -- hurting companies' finances and reputation and potentially undermining consumer confidence in the safety of e-commerce.

Such scams are a growing headache for companies online, but eBay and its financial payment service PayPal may be among the most targeted because of eBay's brand name and massive marketplace. According to the Anti-Phishing Working Group, Financial institutions and online retailers are also the targets of email scammers.

According to a report from online privacy watchdog Truste, seven out of 10 people who go online have received phishing emails, and 15 percent of those have been duped into providing personal information.

eBay has been assertive in fighting scam artists. Last year, for example, the company introduced a security feature for its toolbar that can detect when users are visiting a fraudulent eBay Web site.

Its newest message centre, which is the result of member suggestions, is only in the first phase of development and could eventually incorporate member-to-member communications, Donlay said. Future versions have yet to be decided, he said.

Peter Cassidy, secretary general for the Anti-Phishing Working Group, said eBay may lead a trend in the industry toward privatised email services designed to circumvent fraudulent email. For example, he said, the banking industry has already held talks about building a secure email system for customers. But the financial threat of phishing scams has yet to prove large enough to force the industry's hand, he said.

"I'm not surprised that eBay's doing innovative things because they've been phished for nearly five years," Cassidy said.

eBay began notifying some members of the new message centre over the weekend.

Story URL: http://news.zdnet.co.uk/internet/0,1000000097,39183092,00.htm