One of the biggest threats to the security of your eBay account and your identity is fraudulent emails and websites, called spoof or phishing.

• A phishing email pretending to be from eBay typically contains a link that takes you to a fake website asking you to sign in and submit personal and account information.

• eBay does not require you to enter information on a page that cannot be accessed from the eBay site. When possible, you should avoid clicking on links from emails. Instead copy the address and paste it into your browser. While eBay may send emails that contain links, the links are provided for convenience only. You will not be required to submit sensitive information if a direct link is provided to an eBay page.

• If eBay requests information from you, a copy of that email will be in the My Messages section of My eBay.

• eBay does not send you emails that include attachments, or ask you for your password or other confidential information. For more information see Reporting Spoof (Fake) Email.

• Forwarding any suspicious emails to spoof@ebay.com.au or spoof@paypal.com.au.

Beware of fake websites pretending to be eBay

• If you clicked on a link in an email, verify that the web address in your browser is the same as the address shown in the email.
  
  

• Examples of fake eBay addresses: http://signin.ebay.com.au@10.19.32.4/ or http://signin-ebay.com.au/
  

• Before signing in, check the web address in your browser to be sure that you are signing into a genuine eBay website.

International sites

International eBay websites have slightly different sign-in addresses.

If you have already submitted information after receiving an email request and you suspect your eBay account may have been tampered with, please read Securing Your Account and review the steps on the Protecting Your Identity page.

Learn more about how to protect your eBay account

• Visit eBay's Security Centre

• Take the Spoof Email Tutorial