Online criminals use the automated scripts or bots to create vast collections of user accounts with positive feedback records. Those accounts can then be used to attract buyers by offering high value items that are never delivered after the bot-master criminals have received payments.
Ebay uses feedback ratings to allow its users to build up a reputation. Sellers with a low feed back typically deliver poor customer service or have failed to deliver goods. Buyers are also suspicious of sellers who lack any feedback, especially when it comes to buying and selling more expensive goods.
The bogus accounts typically sell virtual items such as wallpapers and e-books through a "buy it now" auction for one cent and no shipping costs. Those items are then bought by another fraudulent Ebay account, all in an automated fashion.
"Most [of the sellers'] user names are made of six to eight random letters and bear around 15 evaluations. Having a look at these profiles reveals that they’ve bought roughly the same items – all for one cent," Fortinet noted on its website.
Further indicating a level of automation, each buyer is leaving identical comments for each transaction.
"With that one cent rate, building 100 accounts with 15 positive feedbacks each costs US$15. And 100 accounts are a reasonably solid base to set up a good deal of bogus auctions."
The auctioning website is a popular target for online scam artists.
As reported last week, Ebay, together with its Paypal subsidiary, is the target of 75 percent of all phishing emails.
.jpg&h=140&w=231&c=1&s=0)
iTnews State of Security Breakfast
iTnews State of Data & AI Breakfast
Forrester's AI Forum Sydney
The 2026 iAwards
Security Exhibition & Conference
_(1).jpg&h=140&w=231&c=1&s=0)
