Online auction site eBay has made public the details of a three-year long campaign to curb online fraud being perpetrated by criminals in Romania — an effort that has resulted in several hundred arrests.
Matt Henley, a member of eBay's US-based Fraud Investigations Team, spoke about the campaign while taking part in a two-day workshop in Sydney with representatives of local law enforcement agencies.
Henley is currently in town to discuss the latest online fraud techniques with representatives from the Australian Federal Police, the Australian High Tech Crime Centre, the Australian Crime Commission, the Australian Communications and Media Authority and all the state and territory police forces.
The e-commerce site's internal fraud team first took note of a higher-than-usual amount of fraudulent activity from Eastern Europe in 2005.
"A huge percentage of the fraud we were seeing was from Romania," Henley said.
While schemes varied, many of these criminals committed fraud after approaching eBay users that had narrowly lost an auction.
"The fraudster can see that a user that didn't win was prepared to spend AU$145 (£61) on a particular item," Henley explained. "They would then attempt to contact the user off the eBay platform to offer them a second chance. The number one goal of these fraudsters was to pull users off of eBay — away from our security cameras so to speak."
The fraudsters would first have to guess the emails of the losing bidders — most commonly by combining their eBay username with popular webmail domains.
Competition
Blogger at Large
The deadline's fast approaching on our contest to win a trip to San Francisco and a Centrino Pro laptop to blog from the Intel Developer Forum. To enter, just start posting entries to our On the Road group blog.
"It's very common that users have the same username for their eBay as their email," Henley explained. "Simply by sending out 50 emails of the most common domain names — including the eBay username — at Gmail, Hotmail, Yahoo, [they would have a certain level of success]."
The scale of the fraud was such that eBay formed a dedicated team to look into the issue — hiring a crack team of analysts and lawyers to work with victims and the Romanian authorities to come up with some solutions.
The team's initial assessment attributed the Romanian problem to two central issues — a technology knowledge gap and a lack of resources to tackle cybercrime.
"What we found is that there is a huge gap between generations in Romania," Henley said. "There are 25- to 30-year-old criminals that are among some of the brightest we've ever dealt with. But law enforcement officials and magistrates might have never even used a computer."
The eBay team first took an education role — running roadshows for law enforcers, and conducting a two-day course with the National Institute of Magistrates in Bucharest in conjunction with Visa and MasterCard.
Last year, eBay and Microsoft also sponsored a national cybercrime conference in Romania, talking about the online fraud issue with 200 law enforcement agencies.
Next, eBay attempted to address resourcing issues to fight cybercrime in Romania.
Romania tends to base its resource allocation on population, so most of its law enforcement efforts in the country had been concentrated on its capital, Bucharest.
"Whereas we found that most of the fraud is coming from towns with populations of 50,000 or 100,000," Henley said.
In some of these towns, the eBay team found backlogs of 200 eBay-related fraud cases.
"The police presence in these towns often didn't even have an internet connection," Henley said. "Some were using the same internet cafés as the criminals, which was of grave concern to us."
The Romanian police force thus became the lucky recipients of donated internet connections, computer equipment and digital cameras, courtesy of eBay.
Since the campaign began three years ago, Henley claims that eBay has helped the Romanian authorities make "several hundred arrests" related to online fraud.
"Prior to this, nobody was being arrested," he said. "At least now there is the knowledge that there is a risk associated with being involved in this fraud."
Henley is in no doubt that another country like Romania will prove attractive to online criminals, but for now is satisfied that there is no one country more problematic than another.
"The next [problematic] country will be wherever there is the same pattern — highly-trained people with little opportunities to make money legitimately," he said.
