Post #3579180

The #security practices on ebay.com is just stunning. Someone created an ebay account using my e-mail address and managed to enable 2FA instantly. Such things happens from time to time, so I usually do a password reset and delete the account. But since this ebay account had 2FA enabled - I'm not able to do a password reset. Well, you could argue that's good security, and I won't argue here. The issue comes next ... reaching out to ebay goes via a chat, where you hit someone which has a ready script. Responses look 99.9998% AI LLM. Requesting to chat with a human, I get the response "I am a human". I'm sent to a new web page where I do hit a chat bot, but the guidance from the previous chat was to ask for a human representative 🤦‍♂️ ... this one complies though. Then there's another webform to fill out and then I get a response I need to CALL THEM. The number is a US number. But I am not in the US, I am not going to spend MY money on an international phone call to sort up something like this. To my knowledge, even US tollfree numbers will cost money when calling from abroad. I do find a way to send a report via yet another webform. Where I get a message they will respond within 48 hours. Well, they were quicker, so I guess that's not too bad. However, this is the reply I get: I have reviewed your account and confirmed it would be best if you speak with our dedicated Team who are specialized in resolving these types of issues over call as it need verification. Due to the nature, severity of such issues and for your account protection, they offer customer service only via phone. First of all, how on earth is a phone call going verify that I am who I am and that the caller is not the fraudster abusing my e-mail address? The real issue ebay has: They make it possible to CREATE an account AND enable 2FA WITHOUT an e-mail verification in the first place. No wonder there is so many reports on scams and fraud on ebay. They make it incredibly easy to create illicit accounts. And that is of course going to be abused. I have reported the account as best as I could. The issue is in their hands to solve now. I don't see how I can be held liable for just having an e-mail account abused and ebay not having enough security measures on account creation. But e-mails from ebay.com is going to the spam folder now. And I will NEVER EVER create an ebay account. Unless ... of course ... I could create an ebay account using some random e-mail address. I wonder if ebay.com addresses would work? Just need to remember to enable 2FA as quickly as possible. #ebay #scam #fraud #fail