More email Phishing Scams targeting inkFrog customers. Learn how to spot them.

Greg S. -

Hi all, we are still getting some bad apples that continue to target inkFrog customers with fake Phishing emails. What they are doing is finding your eBay id's or inkFrog usernames and then taking those ID's and sending them out to all the most popular emails. For example, if your eBay id or inkFrog username is "jonjon9" then they are taking that name and sending it out to @gmail, @aol, @yahoo, etc. etc. (you get the idea). They can then target to inkFrog customers directly because they can find inkFrog listings on eBay.

1. First recommendation -- Just do NOT click on any links from an email, especially if you are not familiar with how to spot a fake. Always type in www.inkfrog.com into your browser to get into inkFrog. Anything we send you over email, you will always be able to get the same information by just logging into your account and coming to support through our system directly.

2. Change your email address to use something unique from your eBay id or inkFrog username (your inkFrog username is in your image URL's and can be used by these hackers in the same fashion your eBay id can)

Finally, we have created a simple screenshot for you below to show you some example bad URL's

good_badURL.jpg

Have more questions? Submit a request

Comments

  • Avatar
    poetryinpower

    Have never seen this scam, but thanks for the warning.

  • Avatar
    ozbushq

    I fortunately don't have my ebay username in any of my email addresses. More by luck than good management. I'm just about to get a friend started on ebay so this information will be very important as she creates her username.

    Thanks

  • Avatar
    sfrproducts

    Thank you for writing this article. Our website, which hosts around 1400 listings on ebay had this happen to us. We still have not pinpointed the incident, but Paypal detected the fraud.  Thanks.

  • Avatar
    kevandjewl

    Yes, thank you for keeping us informed.  Do not understand people.  I guess they have nothing better else to do.

  • Avatar
    Kristyna

    Hi - I actually had an e-mail stating that my token had expired.  I was suspicious so before acting on it, contacted support who confirmed that it was a scam.  These people will keep trying and so we all have to remain on our guard.  My e-mail address and contact details have to be on my listings as I am registered as a Business Seller on the UK site.   One of the downfalls of having to comply with European Distant Selling Regs.

  • Avatar
    QUILTSRUS08

    Everyday I get these emails. Ebay token expired or problem with your account.

    I get annoyed every time I see INKFROG because of this.

    I don't want to change my email address as I do have many customers who do contact me this way.

  • Avatar
    Greg S.

    QUILTSRUS08 -- As long as you ignore them they are completely harmless -- just always make sure you login to www.inkfrog.com directly. Unfortunately we have no control over these a**** and can't stop them from sending them. 

  • Avatar
    jef13

    I am in the U.K. I received several of these "update token" emails within a period of a few days. Luckily I did not click on any links. I have to admit I ignored them because the grammar and language in the message was very poor, not like Inkfrog at all. They are extremely annoying but I just kept deleting the emails and they seem to be leaving me alone now (for now!)

    Also, I just wanted to say your customer support is brilliant. I have been really impressed, thank you.

  • Avatar
    Greg S.

    Thanks for the feedback. Sorry to hear your getting these emails :(.. They drive us crazy but hopefully we can get the word out.

  • Avatar
    minime

    i too have had these kind of emails and emails saying that i have violated inkfrog terms and conditions. i know this not to be true because i just log into my inkfrog account. they are also targeting ebay members and paypal members, i have had over 20 in the last week.

  • Avatar
    orangegrovebooks

    Over the past two weeks, I've received about 20 or so of these inkfrog phishing scams. Today I got one that my email address was changed and to click on the link if I didn't approve of the change. Probably one of the most official ones I've seen with correct spelling. I hope these people go away!

  • Avatar
    inkycorrado

    I am a member of ebay uk and have a lot of friends who are PSellers etc, we have a group outside of ebay on FB and this morning a lot are commenting that they have received 4/5 emails reportededly from Inkfrog re their accounts, most of these friends do not and have never used inkfrog so are getting a little frustrated and angry as they think these are coming from yourselves

    just to let you know

  • Avatar
    Greg S.

    These hackers are sending these emails out to eCommerce and eBay sellers in general and not just inkFrog sellers. They know that a lot of these users maybe using inkFrog. So they aren't specifically targeted at our customers, it's just eBay sellers in general

  • Avatar
    inkycorrado

    thankyou Greg, its not that they have an issue with them, they are all aware of the scams, but when they are getting 4-5 a day of these it can get a bit annoying, strangely enough I myself have NOT had any for a while now

  • Avatar
    countybaga

    Have had loads of these and my username and password are safe as I noticed the scam. However It is satisfying to login to the fake site and use expletives as a username and password!

  • Avatar
    Greg S.

    lol.. that will give them a lot more work too because they will try those all over the place :-)

  • Avatar
    hotsale

    why not apply an SSL certificate? We can login safely.

  • Avatar
    Greg S.

    We do encrypt your login on our end (regardless of the SSL) - this is not how the Phishing emails work --  you can login safely by logging in by typing in www.inkfrog.com each type you come to us. Unfortunately many users do not look to see if they are logging in under ssl or not and will still login to a fake inkfrog if they get sent a Phishing email.

  • Avatar
    Greg S.

    We do encrypt your login on our end (regardless of the SSL) - this is not how the Phishing emails work --  you can login safely by logging in by typing in www.inkfrog.com each type you come to us. Unfortunately many users do not look to see if they are logging in under ssl or not and will still login to a fake inkfrog if they get sent a Phishing email.

  • Avatar
    PotOGold

    I've been getting a lot of these.  I ALWAYS sign in to my websites directly, so I assumed this was spam.  My email isn't anything like my ID here or on Ebay.

     

    inkFrog Help Center

    To ______________@hotmail.com

    | From:
    | inkFrog Help Center (daemon@inkFrog.com)
    |
    | Sent:
    | Fri 6/24/11 1:31 AM
    |
    | To:
    | __________________@hotmail.com
    |

    This message looks suspicious to our SmartScreen filters and we'll delete it after ten days.

    Dear inkFrog Member,

    We regret to inform you that your account could be temporaly suspended due to the violation of our site policy.
    If you received this message please please click on the link below, and provide us additional information to prevent in advance any inconvenience caused to your account.

    Click the inkFrog link Here

    Thank You in advance for understanding and we apologize for any inconvenience !
    Sincerely Yours,
    ink Frog Team.

  • Avatar
    viviukltd

    I had some comments Greg...rather than post them here I've raised a ticket.

    Please refer to Request#30313

    FYI - UK Distance Seller Regulations require contact details to be available on listings...for all business sellers

  • Avatar
    Greg S.

    Please email me this info to  greg at (inkfrog)  -- and thanks for letting me know about the UK requirements. 

  • Avatar
    PJ

    Hi, we have just had our first phishing email from  http://inkfrolg.com/dek.php

    The subject line of both emails stated "We have detected that your inkFrog account is not up to date.". Two things jump out at me with regards to the subject line. Again, note the bad grammar with "inkFrog" and the full stop at the end of the subject line.There is also a bold "UPDATE YOUR ACCOUNT" link in the email text that points to the above URL.

     

    Needless to say, these emails have been deleted.

     

  • Avatar
    redgaragedoor

    I got my first phising email from inkFrolg today. Marked as spam and deleted.

  • Avatar
    someonestreasures

    I got one today also Same addy inkfrolg stating my account was not up to date

  • Avatar
    LiliMoM

    Looks like more of these are going around .... go one today .......... go figure .... it is the 31st of OCT>>>>> !

  • Avatar
    salviati

    I feel prey to the inkfrolg (with an "l") phish last week. Within 3 hours, there were 40 bogus items posted to my eBay account. eBay discovered them and had elminated them within an hour. Not sure how they detect that they are not mine, but they were johnny-on-the-spot.

Powered by Zendesk