Ebay fraud - Datron 4910 - Voltage reference

[try]

Hello there,

always during week-ends and preferably during night time in the responsable Ebay branch fraudulous offers appear.

Using stolen pictures and pirating good ebay accounts some fraudsters want to be contacted (and paid of course) outside of the Ebay platform. This is the dubious offer:

https://www.ebay.de/itm/193906296432?ul_noapp=true

I just informed the security department of Ebay Germany.

Best regards
try

[ScoobyDoo]

Hello Folks - same impostor is posting fraudulent auctions about 3458A unit ... - he uses stolen photos and someone else online shop.

https://www.ebay.com/itm/HP-Hewlett-Packard-3458A-Agilent-Digital-Multimeter-8-8-5-Digits-w-Option-2/203284989330?hash=item2f54bac592:g:96oAAOSwsnZgMali

If price is too good to be true - stay away and inform ebay ...

Best regards
ScoobyDoo

[try]

Hello ScoobyDoo,

could you give Ebay a ring? Will have to join a meeting now...

Best regards
try

[ScoobyDoo]

Hello Try - sent ebay a message about 3 similar fraudulent ads - I hope they remove those soon.

However this impostor returns every week using different hacked accounts from webshops ... - eBay should do more effort to stop these crooks.

Best regards
ScoobyDoo

some easy checks: 

location item [USA / Germany] and address webshop - VAT number [GB] does not match
They do not respond on messages coming from ebay which is against ebay policy
A pawn shop is involved but they only accept the minimum reserve and will make proposal to pay outside ebay system
Price is still too good to be true ... - a good 3458A starts around 4000$ (and above) these days or something is fishy

[Kean]

I've reported a bunch of these listings in the last days (and more in the weeks prior).  They keep matching some of my searches so I keep reporting them.
When you see a listing with that pawn shop image in particular, just click Report Item then choose "Listing Practices", "Avoiding eBay fees", "Contact info in listings" - or something similar.
Every time I've done this the listing dissapears within a day, along with any similar listings (possibly all listings) on the hacked seller account.
I've just done it for the two listings mentioned above.

[tggzzz]

I wonder whether fleabay responds faster to "avoiding ebay fees" or "fraudulent listing"?

[try]

Hi folks,

thanks for your engagement!
From what I learnt Ebay could be much faster in removing this ads.

tggzzz, I fear that "avoiding ebay fees" is the right answer!

I hope your reference is doing fine! Unfortunately it does not look like that there is opportunity for a comparison right now, unfortunately.

Anyway, I'd like to wish you all low measurement uncertainty in 2022.

[richnormand]

Seems to see lots of listing by these folks for the past 6 months, particularly on Keysight, R&S SA and signal generators.
They use different (stolen?) accounts every sew weeks and the photos seem to be often generic ones, not the actual items.
In reporting to ebay  the "avoid ebay fees" gets an almost immediate response compared to any other reasons I have used from the drop-down menu.

It is tempting to put an actual bid and press ebay to see if they stand by it (depending on the country I guess). If they were obliged by law I am sure these would disappear instantly.
Considering how long this has been going on, by the same party (same contact info), I am surprised ebay itself has not followed through on an order to get them in court. The scam must be profitable to continue with impunity.

 

[SilverSolder]

Seems to see lots of listing by these folks for the past 6 months, particularly on Keysight, R&S SA and signal generators.
They use different (stolen?) accounts every sew weeks and the photos seem to be often generic ones, not the actual items.
In reporting to ebay  the "avoid ebay fees" gets an almost immediate response compared to any other reasons I have used from the drop-down menu.

It is tempting to put an actual bid and press ebay to see if they stand by it (depending on the country I guess). If they were obliged by law I am sure these would disappear instantly.
Considering how long this has been going on, by the same party (same contact info), I am surprised ebay itself has not followed through on an order to get them in court. The scam must be profitable to continue with impunity.

You would be refunded, obviously, but you never get the time you wasted back.

[Cerebus]

These same fraudsters have been running the same scam for much longer than 6 months. I can't remember quite when we first noticed them, but for a while every Saturday morning in the TEA thread there was a rash of "The eBay fraudsters are back again. Reported them again." postings. It's at least a year, probably longer.

I don't know if eBay are useless or powerless, but they seem to have completely failed to stop them. Just the hijacking of accounts is enough under UK law to get them charged with criminal offences, and similar offences exist in most jurisdictions so there's no barrier to stopping them. They have to take money at some point for it to be a useful scam, and once there's a money trail there's a good chance of law enforcement tracking them down and charging them - repeated hacking is probably enough to get them locked up for long enough to prepare substantial fraud charges against them.

They're on eBay every weekend and eBay don't seem to even slow them down, I can only presume that eBay haven't even spoken to the police about it. If we've spotted a pattern one would hope that eBay had managed to by now but either they haven't or they don't care. Other than reporting the individual fraudulent items there don't seem to be any way to point out the pattern to eBay in case they really have missed it.

I guess one could do a BD139 and shitpost all over Twitter about it. 

[SilverSolder]

These same fraudsters have been running the same scam for much longer than 6 months. I can't remember quite when we first noticed them, but for a while every Saturday morning in the TEA thread there was a rash of "The eBay fraudsters are back again. Reported them again." postings. It's at least a year, probably longer.

I don't know if eBay are useless or powerless, but they seem to have completely failed to stop them. Just the hijacking of accounts is enough under UK law to get them charged with criminal offences, and similar offences exist in most jurisdictions so there's no barrier to stopping them. They have to take money at some point for it to be a useful scam, and once there's a money trail there's a good chance of law enforcement tracking them down and charging them - repeated hacking is probably enough to get them locked up for long enough to prepare substantial fraud charges against them.

They're on eBay every weekend and eBay don't seem to even slow them down, I can only presume that eBay haven't even spoken to the police about it. If we've spotted a pattern one would hope that eBay had managed to by now but either they haven't or they don't care. Other than reporting the individual fraudulent items there don't seem to be any way to point out the pattern to eBay in case they really have missed it.

I guess one could do a BD139 and shitpost all over Twitter about it. 

I don't think hardly any resources are being put in place by law enforcement to detect and prosecute these kinds of crimes.  So the perps just keep coming back, hacking someone else's account and having another go.

[Cerebus]

True. The UK is getting slowly better in that regard. However, the fraud is the thing that would interest the police (one hopes it does when it's at this scale and persistence anyway) and the computer offences would be the "way in", rather like that expired tax disc/tag on your car can be the way into a discussion about your vehicle insurance, or outstanding warrants, or the funny smell coming from your cigarette.

[Stray Electron]

I don't think hardly any resources are being put in place by law enforcement to detect and prosecute these kinds of crimes.  So the perps just keep coming back, hacking someone else's account and having another go.

  A good CIVIL lawsuit and a substantial financial judgement against them (and their ISP and anyone else connected to them) by E-bay and/or PayPal would soon put an end to this kind of business. 

[guenthert]

  A good CIVIL lawsuit and a substantial financial judgement against them (and their ISP and anyone else connected to them) by E-bay and/or PayPal would soon put an end to this kind of business.

     You don't want to hold ISPs responsible for their customers' actions anymore than you'd want a restaurant owner where potentially some Mafiosis discuss their shady business. 

(substitute "Mafiosi" with spies, politician, capitalists, anarchists, terrorists, adulterers ... as it suits you)

[SilverSolder]

I don't think hardly any resources are being put in place by law enforcement to detect and prosecute these kinds of crimes.  So the perps just keep coming back, hacking someone else's account and having another go.

  A good CIVIL lawsuit and a substantial financial judgement against them (and their ISP and anyone else connected to them) by E-bay and/or PayPal would soon put an end to this kind of business.

Put them on a "no fly list" for bank accounts, so they can't open new bank accounts - that should stop it.

[tggzzz]

I don't think hardly any resources are being put in place by law enforcement to detect and prosecute these kinds of crimes.  So the perps just keep coming back, hacking someone else's account and having another go.

  A good CIVIL lawsuit and a substantial financial judgement against them (and their ISP and anyone else connected to them) by E-bay and/or PayPal would soon put an end to this kind of business.

Put them on a "no fly list" for bank accounts, so they can't open new bank accounts - that should stop it.

That opens up the question of "digital identity", which is a graveyard of good intentions. It is a classic example of amateurs thinking about how it might work, but professionals think about how it will fail.

[SilverSolder]

I don't think hardly any resources are being put in place by law enforcement to detect and prosecute these kinds of crimes.  So the perps just keep coming back, hacking someone else's account and having another go.

  A good CIVIL lawsuit and a substantial financial judgement against them (and their ISP and anyone else connected to them) by E-bay and/or PayPal would soon put an end to this kind of business.

Put them on a "no fly list" for bank accounts, so they can't open new bank accounts - that should stop it.

That opens up the question of "digital identity", which is a graveyard of good intentions. It is a classic example of amateurs thinking about how it might work, but professionals think about how it will fail.

Not sure I understand - a bank account is very much linked to a person (including limited company "persons" obviously).

Banks already have to follow "know your customer" rules and would get in trouble for opening accounts for money launderers etc., so this approach is already in effect today - just not for "petty" crimes.

[Cerebus]

Not sure I understand - a bank account is very much linked to a person (including limited company "persons" obviously).

Banks already have to follow "know your customer" rules and would get in trouble for opening accounts for money launderers etc., so this approach is already in effect today - just not for "petty" crimes.

Now sit back and have a think, and try and design in your head a system that will work worldwide, no matter where a person purportedly originates from, a system that will allow an individual to be:

• Uniquely and unambigiously identified,
• in which a person can always reliably prove their true identity (no false negatives)
• in which no other person is ever accidentally identified as the first person and thus denied something like a bank account by mistake (no false positives),
• that cannot be forged, even if the person claims to come from somewhere where official identity is difficult to establish (unreliable or corrupt governments that might issue false papers cheaply or even make a business of it [cf Malta]),
• that can be used by anyone worldwide, and doesn't rely on access to notaries, a reliable postal service or any other particular primary or secondary lynchpin typically used to prove possession of an official document or ability to receive post at some physical address, and isn't too onerous or expensive to expect everybody worldwide to use it.

If you have any imagination you ought to be able to come up with a way that any system you invent will fail or can be subverted within ten minutes of inventing it.

Proving identity electronically is a "hard problem"; proving transactional entitlement is on the other hand doable, which is why so many electronic systems rely on it (e.g. possession of a digital receipt that can be exchanged for some particular good or service).

Edited to add: In context, I've just opened a new bank account online with a major high street bank that I have never done business with before. The whole identify issue in doing so relied on (1) a scan of something that purports to be my driving licence, (2) a pdf of what purports to be my most recent bank statement from another bank I do business with, (3) delivering passwords and the like to a particular physical address, (4) being able to deliver email to a particular email address (that it so happens I created specifically for use with the bank account and that had never been used prior to making the account application). The difficulty of forging or subverting all of the above is not high.

[SilverSolder]

Not sure I understand - a bank account is very much linked to a person (including limited company "persons" obviously).

Banks already have to follow "know your customer" rules and would get in trouble for opening accounts for money launderers etc., so this approach is already in effect today - just not for "petty" crimes.

Now sit back and have a think, and try and design in your head a system that will work worldwide, no matter where a person purportedly originates from, a system that will allow an individual to be:

• Uniquely and unambigiously identified,
• in which a person can always reliably prove their true identity (no false negatives)
• in which no other person is ever accidentally identified as the first person and thus denied something like a bank account by mistake (no false positives),
• that cannot be forged, even if the person claims to come from somewhere where official identity is difficult to establish (unreliable or corrupt governments that might issue false papers cheaply or even make a business of it [cf Malta]),
• that can be used by anyone worldwide, and doesn't rely on access to notaries, a reliable postal service or any other particular primary or secondary lynchpin typically used to prove possession of an official document or ability to receive post at some physical address, and isn't too onerous or expensive to expect everybody worldwide to use it.

If you have any imagination you ought to be able to come up with a way that any system you invent will fail or can be subverted within ten minutes of inventing it.

Proving identity electronically is a "hard problem"; proving transactional entitlement is on the other hand doable, which is why so many electronic systems rely on it (e.g. possession of a digital receipt that can be exchanged for some particular good or service).

Edited to add: In context, I've just opened a new bank account online with a major high street bank that I have never done business with before. The whole identify issue in doing so relied on (1) a scan of something that purports to be my driving licence, (2) a pdf of what purports to be my most recent bank statement from another bank I do business with, (3) delivering passwords and the like to a particular physical address, (4) being able to deliver email to a particular email address (that it so happens I created specifically for use with the bank account and that had never been used prior to making the account application). The difficulty of forging or subverting all of the above is not high.

I guess digital currencies can do a lot, but when all is said and done, there just isn't enough interest in stopping fraud.

If you wanted to stop fraud with today's banking system, you would change the rules.  For example, if you wanted to be really draconian, make it so that as soon as an account is flagged as being involved in a fraudulent transaction, all transfers out of that account after the date of the first fraudulent transaction are reversed - every last one of them, with the onus being on the receiving bank or financial institution. 

The fraudulently obtained money is then returned to the sender out of the returned funds, and the account is closed.  This way, the bank that was insecure enough to actually hand money over to the criminal fraternity at the far end of the transaction chain ends up carrying the can - which is as it should be.  They would soon start to care a lot more about who their customers are, and it would become much more difficult to criminals to open a bank account. 

But nobody wants this.   The black "informal" economy accounts for some 20% of GDP...

[tggzzz]

In a world where information was correct, a justification could be made for something like that. But back on planer earth where all databases contain errors, it will screw you in correctly

Current example: someone I know trying to get a bank to acknowledge their identity, but the verification fails despite being on the electoral roll at the same address for 40 years. Why? Because the name on formal legal documents is Alpha Bravo Charlie Delta, but Experian knows him as Alpha Bravo Delta.

[tggzzz]

As for digital identity certificates, a quarter of a century ago Stefik Zaba made the point to the government by correctly pointing out "my name is Donald Duck and I have a digital certificate to prove it".

[SilverSolder]

In a world where information was correct, a justification could be made for something like that. But back on planer earth where all databases contain errors, it will screw you in correctly

Current example: someone I know trying to get a bank to acknowledge their identity, but the verification fails despite being on the electoral roll at the same address for 40 years. Why? Because the name on formal legal documents is Alpha Bravo Charlie Delta, but Experian knows him as Alpha Bravo Delta.

Attempting to get a driver's license in the US, I ran into the problem that the DMV wouldn't accept my social security card...  because the name on the card was truncated compared to the passport.  Reason:  the social security card has a limitation on the number of characters it can have in the name field, so they shortened it down...   (It eventually got resolved but a supervisor had to be called over to talk sense into the clerk.)

Bottom line, live with the fraud, and think of it as a kind of QE...  after all, the crooks create demand in the real economy with their ill gotten gains!   As long as the defrauded people are covered, it seems to work OK without anyone having to do a lot of hard work...   the default situation with government! 

[tggzzz]

Shamelessly "researched" from https://www.kalzumeus.com/2010/06/17/falsehoods-programmers-believe-about-names/

I have never seen a computer system which handles names properly and doubt one exists, anywhere.

So, as a public service, I’m going to list assumptions your systems probably make about names.  All of these assumptions are wrong.  Try to make less of them next time you write a system which touches names.

    People have exactly one canonical full name.
    People have exactly one full name which they go by.
    People have, at this point in time, exactly one canonical full name.
    People have, at this point in time, one full name which they go by.
    People have exactly N names, for any value of N.
    People’s names fit within a certain defined amount of space.
    People’s names do not change.
    People’s names change, but only at a certain enumerated set of events.
    People’s names are written in ASCII.
    People’s names are written in any single character set.
    People’s names are all mapped in Unicode code points.
    People’s names are case sensitive.
    People’s names are case insensitive.
    People’s names sometimes have prefixes or suffixes, but you can safely ignore those.
    People’s names do not contain numbers.
    People’s names are not written in ALL CAPS.
    People’s names are not written in all lower case letters.
    People’s names have an order to them.  Picking any ordering scheme will automatically result in consistent ordering among all systems, as long as both use the same ordering scheme for the same name.
    People’s first names and last names are, by necessity, different.
    People have last names, family names, or anything else which is shared by folks recognized as their relatives.
    People’s names are globally unique.
    People’s names are almost globally unique.
    Alright alright but surely people’s names are diverse enough such that no million people share the same name.
    My system will never have to deal with names from China.
    Or Japan.
    Or Korea.
    Or Ireland, the United Kingdom, the United States, Spain, Mexico, Brazil, Peru, Russia, Sweden, Botswana, South Africa, Trinidad, Haiti, France, or the Klingon Empire, all of which have “weird” naming schemes in common use.
    That Klingon Empire thing was a joke, right?
    Confound your cultural relativism!  People in my society, at least, agree on one commonly accepted standard for names.
    There exists an algorithm which transforms names and can be reversed losslessly.  (Yes, yes, you can do it if your algorithm returns the input.  You get a gold star.)
    I can safely assume that this dictionary of bad words contains no people’s names in it.
    People’s names are assigned at birth.
    OK, maybe not at birth, but at least pretty close to birth.
    Alright, alright, within a year or so of birth.
    Five years?
    You’re kidding me, right?
    Two different systems containing data about the same person will use the same name for that person.
    Two different data entry operators, given a person’s name, will by necessity enter bitwise equivalent strings on any single system, if the system is well-designed.
    People whose names break my system are weird outliers.  They should have had solid, acceptable names, like 田中太郎.
    People have names.

This list is by no means exhaustive.  If you need examples of real names which disprove any of the above commonly held misconceptions, I will happily introduce you to several.

[rsjsouza]

Attempting to get a driver's license in the US, I ran into the problem that the DMV wouldn't accept my social security card...  because the name on the card was truncated compared to the passport.  Reason:  the social security card has a limitation on the number of characters it can have in the name field, so they shortened it down...   (It eventually got resolved but a supervisor had to be called over to talk sense into the clerk.)

Hah, I can surely relate to that. I have four names/surnames and a preposition in the middle. Try to fit that into First Name, Middle Initial and Last Name.

That is the reason why some of the more "official" forms ask about "other names you are known (including maiden)". I tend to fill whatever I have registered on the DL, the SS, the Passport, the bank account, the credit card...

[TimFox]

@ tggzzz:
A special case of the assumptions in the list (fitting into several of the lines) is that names never include diacritical (accent) marks, even if the family name is French, Spanish, German, etc.

[SilverSolder]

Shamelessly "researched" from https://www.kalzumeus.com/2010/06/17/falsehoods-programmers-believe-about-names/

I have never seen a computer system which handles names properly and doubt one exists, anywhere.

So, as a public service, I’m going to list assumptions your systems probably make about names.  All of these assumptions are wrong.  Try to make less of them next time you write a system which touches names.

    People have exactly one canonical full name.
    People have exactly one full name which they go by.
    People have, at this point in time, exactly one canonical full name.
    People have, at this point in time, one full name which they go by.
    People have exactly N names, for any value of N.
    People’s names fit within a certain defined amount of space.
    People’s names do not change.
    People’s names change, but only at a certain enumerated set of events.
    People’s names are written in ASCII.
    People’s names are written in any single character set.
    People’s names are all mapped in Unicode code points.
    People’s names are case sensitive.
    People’s names are case insensitive.
    People’s names sometimes have prefixes or suffixes, but you can safely ignore those.
    People’s names do not contain numbers.
    People’s names are not written in ALL CAPS.
    People’s names are not written in all lower case letters.
    People’s names have an order to them.  Picking any ordering scheme will automatically result in consistent ordering among all systems, as long as both use the same ordering scheme for the same name.
    People’s first names and last names are, by necessity, different.
    People have last names, family names, or anything else which is shared by folks recognized as their relatives.
    People’s names are globally unique.
    People’s names are almost globally unique.
    Alright alright but surely people’s names are diverse enough such that no million people share the same name.
    My system will never have to deal with names from China.
    Or Japan.
    Or Korea.
    Or Ireland, the United Kingdom, the United States, Spain, Mexico, Brazil, Peru, Russia, Sweden, Botswana, South Africa, Trinidad, Haiti, France, or the Klingon Empire, all of which have “weird” naming schemes in common use.
    That Klingon Empire thing was a joke, right?
    Confound your cultural relativism!  People in my society, at least, agree on one commonly accepted standard for names.
    There exists an algorithm which transforms names and can be reversed losslessly.  (Yes, yes, you can do it if your algorithm returns the input.  You get a gold star.)
    I can safely assume that this dictionary of bad words contains no people’s names in it.
    People’s names are assigned at birth.
    OK, maybe not at birth, but at least pretty close to birth.
    Alright, alright, within a year or so of birth.
    Five years?
    You’re kidding me, right?
    Two different systems containing data about the same person will use the same name for that person.
    Two different data entry operators, given a person’s name, will by necessity enter bitwise equivalent strings on any single system, if the system is well-designed.
    People whose names break my system are weird outliers.  They should have had solid, acceptable names, like 田中太郎.
    People have names.

This list is by no means exhaustive.  If you need examples of real names which disprove any of the above commonly held misconceptions, I will happily introduce you to several.

LOL so many traps for young players!

The thing that has always worked for me is to just assume that a "name" is any characters the user is able to enter into the field.

So if you want to be known as the Ascii(7) character, be my guest! 

[Cerebus]

Attempting to get a driver's license in the US, I ran into the problem that the DMV wouldn't accept my social security card...  because the name on the card was truncated compared to the passport.  Reason:  the social security card has a limitation on the number of characters it can have in the name field, so they shortened it down...   (It eventually got resolved but a supervisor had to be called over to talk sense into the clerk.)

Hah, I can surely relate to that. I have four names/surnames and a preposition in the middle. Try to fit that into First Name, Middle Initial and Last Name.

That's how "Felipe Juan Pablo Alfonso de Todos los Santos de Borbón y Grecia" ends up in a database somewhere as "Mr. Phillip A King" or if he's lucky as "Mr. Felipe A King". 

[try]

Hello all,

the fraudsters are back:

https://www.ebay.de/itm/224375502875?ul_noapp=true

I just notified Ebay.

"Und samstags grüßt das Murmeltier!".

[ScoobyDoo]

Hello Folks,

These gangsters always hack ebay accounts based in UK (or Germany) while goods are located in US.

Best regards
ScoobyDoo

Further reading:
https://www.watchuseek.com/threads/has-anyone-ever-bought-a-watch-from-ebay-rednose125-aka-pw-shop-live.5280656/

[picburner]

Just stopped on a store but they immediately start hacking another store....
https://www.ebay.com/itm/143970076038
.....flooding it with thousands of bogus adverts.

[Kean]

I am suprised eBay don't have something to detect and block email addresses in listing images.

[try]

Picburner, thanks for letting me know. I just called Ebay up.

@Kean, as the gear is not real Ebay does not incure dammage - only their customers.

[Kean]

Picburner, thanks for letting me know. I just called Ebay up.

@Kean, as the gear is not real Ebay does not incure dammage - only their customers.

Of course it damages eBay.  Any fraud on their platform damages their reputation.  And they have to pay staff to deal with the angry customers or hacked merchants, or to deal with our reports of these fake listings.

[try]

What about flash flooding the sellers expressing our buying interest and starting to negotiate the price? 

[try]

Fresh fakes anybody?

https://www.ebay.de/itm/Datron-Wavetek-4910-DC-Voltage-Reference-Standard/174670764477

Datrons grow like weed. 

[SilverSolder]

What about flash flooding the sellers expressing our buying interest and starting to negotiate the price? 

Flash flooding eBay with complaints about the listings is likely to be more effective!

[SilverSolder]

Fresh fakes anybody?

https://www.ebay.de/itm/Datron-Wavetek-4910-DC-Voltage-Reference-Standard/174670764477

Datrons grow like weed. 

"Wir haben überall gesucht.  Anscheinend existiert diese Seite nicht. Für weitere Hilfe besuchen Sie unsere Hilfeseiten."

Nice work! 

[LazyJack]

I just can't fathom why these scams work. Because they work, otherwise they would not be popping up every day. Apparently there are enough stupid people to fall for these.

[SilverSolder]

Even a smart person can fall for a scam of some kind, if you are busy/preoccupied with something else.

That's why scammers should be tarred and feathered, and mounted on spikes in prominent areas of the city, pour encourager les autres!

[tggzzz]

Even a smart person can fall for a scam of some kind, if you are busy/preoccupied with something else.

Very true.

One of the first programmers who helped create the first commercial computer, Mary Berners-Lee, fell victim to a scam. You may have heard of her son.

[picburner]

They started again, this time not on the weekend, and they changed the kind of items for sale.
I found them by chance and already reported them to eBay, so the link may soon no longer exist.
www.ebay.com/itm/284213852508

Edit: eBay took about 3 hours from my referral to remove the scam listing but left all other fake listings in the same shop :
https://www.ebay.com/usr/antcar_neave5qg

Edit2: finally now, after 8 hours, they have cleaned up the whole shop.

[ScoobyDoo]

This morning we found multiple fraudulent listings in "HP 3458A" and "KEITHLEY 2002 DMM" groups on Flebay

https://www.ebay.com/itm/HP-Hewlett-Packard-3458A-Agilent-Digital-Multimeter-8-8-5-Digits-w-Option-2/184708117830?hash=item2b01763546:m:mRyjOnTZ44ZBgmkOm-Zbu1g

https://www.ebay.com/itm/Keithley-2002-Multimeter-8-12-Digit-DMM-2000-SCAN-10-Channel-Scanner-Card/193953239291?hash=item2d288390fb:m:mTqi6aG5_7sE5wcr0udcO8g

They changed their name from "pawnstore" to "ebshop" ...

[SilverSolder]

This morning we found multiple fraudulent listings in "HP 3458A" and "KEITHLEY 2002 DMM" groups on Flebay

https://www.ebay.com/itm/HP-Hewlett-Packard-3458A-Agilent-Digital-Multimeter-8-8-5-Digits-w-Option-2/184708117830?hash=item2b01763546:m:mRyjOnTZ44ZBgmkOm-Zbu1g

https://www.ebay.com/itm/Keithley-2002-Multimeter-8-12-Digit-DMM-2000-SCAN-10-Channel-Scanner-Card/193953239291?hash=item2d288390fb:m:mTqi6aG5_7sE5wcr0udcO8g

They changed their name from "pawnstore" to "ebshop" ...

Hehe it is kind of funny how you are stalking the bad guys.  Make them work for their money!   

[ScoobyDoo]

A few hours later today they were back again - but apparently these SCAMMERS are active in lots of listings for Metrology gear ...

I start to believe these are regular EEVBLOG visitors ...

eBAY should grey out "auction" bullet in Metrology section - that would help

More EE members should flag these fraudulent SCAMMERs so they go elsewhere ...

[Kean]

Yep, earlier today I came across listings with this new ebstore contact detail on hacked accounts "gkrepairs", "katestore", and "mimamodparis".  All reported a few hours ago, but so far they've only removed listings from the first and last ones.  I think those stores are in UK, USA, and FR respectively, so reports are probably handled by different teams in different timezones.

I start to believe these are regular EEVBLOG visitors ...
eBAY should grey out "auction" bullet in Metrology section - that would help

They list a wide range of products of high value.  I think high end test gear is just one area, there are also watches, bicycles, guitars, and machinery.  As they keep listing the same items each time, they keep appearing in my searches and getting reported.  The prices are way too low to be genuine, and then you see the image with contact details each time.

[ScoobyDoo]

They are active in KS oscilloscope section too - e.g. this is an auction

https://www.ebay.com/itm/Tektronix-MDO4104-6-4-Channel-1GHz-Mixed-Domain-Oscilloscope/274718753738?hash=item3ff68383ca%3Am%3AmMU-ZjWrQ0QzqrC3KaSqzRg&LH_Auction=1

[SilverSolder]

They are active in KS oscilloscope section too - e.g. this is an auction

https://www.ebay.com/itm/Tektronix-MDO4104-6-4-Channel-1GHz-Mixed-Domain-Oscilloscope/274718753738?hash=item3ff68383ca%3Am%3AmMU-ZjWrQ0QzqrC3KaSqzRg&LH_Auction=1

The listing has already been removed - maybe eBay will get used to the fact that we will be complaining every time, so it is easier for them to just block the scammers! 

We should do the same with not-as-described components (fake components), get the sellers used to saying "Used Components" instead, and not waste time remarking them!

[ScoobyDoo]

Folks - the impostors were back this morning - five nine twelve listings using stolen pictures under auction in 3458A section

Hopefully they will be removed very soon ...

It would be good if some Voltnuts check out ebay every Saturday morning and report these fraudulent listings to Fleepay.

They also change their modus operandi - they invite people to divert to their fake website:

https://www.ebay.com.4953236.com/CT/A81.html

[mansaxel]

  A good CIVIL lawsuit and a substantial financial judgement against them (and their ISP and anyone else connected to them) by E-bay and/or PayPal would soon put an end to this kind of business.

Shooting the messenger is what dictators and media industry lawyers practice.  Sensible people might think twice.

"mere conduit"

[tggzzz]

  A good CIVIL lawsuit and a substantial financial judgement against them (and their ISP and anyone else connected to them) by E-bay and/or PayPal would soon put an end to this kind of business.

Shooting the messenger is what dictators and media industry lawyers practice.  Sensible people might think twice.

"mere conduit"

If only it was that clear cut and simple.

https://en.m.wikipedia.org/wiki/Godfrey_v_Demon_Internet_Service

[try]

Folks - the impostors were back this morning - five nine listings using stolen pictures under auction in 3458A section
Hopefully they will be removed very soon ...

It would be good if some Voltnuts check out ebay every Saturday morning and report these fraudulent listings to Fleepay.

They also change their modus operandi - they invite people to divert to their fake website:

https://www.ebay.com.4953236.com/CT/A81.html

Hello ScoobyDoo,

the story remembers me the film "Und täglich grüßt das Murmeltier" (Originaltitel: Groundhog Day)

I rang up Ebay. The employee was busier in getting my credentials (date of birth) than in stopping the fraud.
I told him that giving my Ebay alias and my full name would be enough.

The German team is unable to delete obvious fraudulous offers on the American Ebay site. This denotes how bad Ebay is organized. 

I am glad to see that you are taking care of the fraudsters.

The Datron should be going offline now.

Best regards and thank you for your last email... 
try

[picburner]

As a countermeasure (completely useless) eBay now asks for a second login to access my sales page.
Basically they only just waste my time: if someone hacked my account he already has my name and my password!!
What's the point of asking twice?

[SilverSolder]

As a countermeasure (completely useless) eBay now asks for a second login to access my sales page.
Basically they only just waste my time: if someone hacked my account he already has my name and my password!!
What's the point of asking twice?

That's what most security precautions do - waste the time of the legitimate user.

The result is a drag on the economy as people react by using the inconvenient, cumbersome crap less!

[tggzzz]

That's what most security precautions do - waste the time of the legitimate user.

They shift responsibility.

The PIN on an ATM/debit card is to protect the bank, not the customer. "The PIN was correct so either you used the card or you gave it to someone else against our Ts&Cs. Your problem".

See Halifax vs Munden, where a policeman was jailed for fraud. Years later they found the frausters were Halifax employees

[richnormand]

I have sent multiple listing feedback to ebay about this.
They always use the same contact email "pawn shop" and the same picture in the photo.
Interesting that a "whois" search to that domain would list them in a non US country.
But ebay has not done anything to stop them. I would think they could flag a photo that is well known an stop them if they really wanted to...
I have stopped reporting them now since it looks ebay with all its resources does not really care.

[SilverSolder]

I have sent multiple listing feedback to ebay about this.
They always use the same contact email "pawn shop" and the same picture in the photo.
Interesting that a "whois" search to that domain would list them in a non US country.
But ebay has not done anything to stop them. I would think they could flag a photo that is well known an stop them if they really wanted to...
I have stopped reporting them now since it looks ebay with all its resources does not really care.

They only care if big interests with big lawyers step in...  e.g. try to sell a video that the movie industry doesn't want you to sell, and see how effective eBay can be...

[ScoobyDoo]

Hello Folks - it was quiet this week - however the scammers were busy last night:

ebay items

143989637896
143989648834
143989637850

Fraudulent links
https://www.ebay.com.8870945.com/CT/A43.html
https://www.ebay.com.5378281.com/CT/F524.html
https://www.ebay.com.8870945.com/CT/A81.html

While removing these fraudulent listings they popped again under different stolen account ...

https://www.ebay.com/sch/i.html?_from=R40&_nkw=3458A&_sacat=0&rt=nc&LH_Auction=1

I wonder how well these trustworthy sellers protect their Fleepay passwords ... ?

Best regards
ScoobyDoo

[try]

My beloved Datron 4910 is back for fraud! 
And it has doubled its existence even!

https://www.ebay.de/sch/i.html?_sop=10&LH_PrefLoc=2&_nkw=datron+4910&ul_noapp=true

Using one of ScoobyDoo fraudster links I just submitted my interest in a 3458A (see attached pictures)  for the "100% authentic" article.

[picburner]

The Datron 4910 fake auction is back!
https://www.ebay.co.uk/itm/254926706446
With the poor shop flooded with hundreds of other fake auctions.

[ScoobyDoo]

Ali Baba and its 40 thieves are back in town ...


Always early on Saturdays - in auction category - looks like when Fleapay resets its auction button ... and opens the door ...

Also in 3458A category of products ...

[try]

I rang them up. Even if they put down the fake ads their ignorance is impressive!

[picburner]

I just discovered another scam: https://www.ebay.co.uk/itm/194012981645
I don't know if the authors are the same or not.
However, even here the shop has been filled with hundreds of other fake auctions.

[rubidium]

Literally dozens of these scams for high-end test equipment popped up on ebay yesterday evening. Vector network analyzers, spectrum analyzers, scopes, LCR meters - all fantastic gear if only true. Telltale indicator is listing for $1500 (one seller) or $1000 (another seller), with directions to not bid, but rather hit the given link to make your offer. The first part of each link starts with "www.ebay.com" but always continues further with an additional ".com", e.g. "www.ebay.com.7153282.com/CT/c332.html". These people should be drawn and quartered.

[ScoobyDoo]

I don't understand why eBay does not grey out its auction button permanently ...
Every Saturday it is set active again and then these thieves are back ...

[picburner]

They are back again: this is the compromised store.

[iMo]

They are back again: this is the compromised store.

I am going to buy a few of those Rolex, Patek Philippe, Audemars Piguet, Omega watches (provided the shipping would not cost me $23) 

[KT88]

Yup noticed that as well - they slightly adjusted their strategy. A 3458A is now around $1500 - $1600.

[try]

Rang up local Ebay security.
The shop owner left an absence notice - he'll be back by the end of september.
Obviously this information makes attacks a lot easier.

[picburner]

....and to stay on topic... they also put one Wavetek 4910 up for sale.

[AaronLee]

....and to stay on topic... they also put one Wavetek 4910 up for sale.

And it has the exact same photo of the item that the OP posted in the first post in this thread.

[AaronLee]

The listing for the Dalton Wavetek 4910 mentioned just two posts up is no long active. I assume Ebay took it down, but they left all the other listings from that seller. Come on, Ebay, use your brain. It's obvious ALL the current listings from that seller are fraudulent, not just that one.

[picburner]

Here we go again! However, they have changed their technique: the payment request is no longer found in the object description but in the second picture.
They also changed the items to "sale": there is no longer the subject of this topic.

[DavidKo]

I cannot confirm if it was fraud, but someone had used my photos (HP 3478A) in another auction (Buy now). It seems that it is not against the ebay picture policy, so I have not reported that (by the way, the same German based seller was selling some cycling GPS with pictures where the cars around had USA style license plates).
Since there are money involved I'm surprised that in Europe it is not necessary 2 factor authentication with exact seller identification for selling goods. At least it will be harder to hack someone account. That was my second thought since the seller had already the history of sold items.

[EE54]

So uh, what's the chance of the scammers appearing here to complain about how we're ruining their business. Would make for quite an entertaining thread.