ebay account repeatedly hacked

TPF may earn a commission from merchant affiliate
links, including eBay, Amazon, and others

rutabaga

O.G.
Mar 20, 2009
2,902
6,908
Hi everyone,

My husband's eBay account has been hacked three times since mid-February. The first time, he discovered he was hacked when he was unable to log into his account. I called CS and they were able to restore access.

Yesterday, his account was hijacked for the second time. We called eBay CS around 4PM and re-set everything including his security questions and answers. I tried to change his username, but at the time it said we had to wait 30 days because it was last changed on February 17, 2020. I thought this was strange because although we did call eBay CS around this time, we didn't change his username.

This morning at 6AM, he attempted to log in so that I could change his username and was locked out again. We called eBay CS and everything was changed - email, phone number, first and last name, and they included an Arizona residential home address. He changed his username and updated his personal information. EBay CS thinks the hack is coming from his e-mail, but he's changed his password multiple times and nothing seems to be amiss with his email.

On a whim, I decided to look up his old e-Bay profile just now. Unfortunately, when I type in the old username, it automatically forwards to the new username. This defeats the purpose of changing his username if the perp's automatically forwarded to the new username/profile page. I also saw that someone other than us successfully changed his username on February 17th, which explains why we were required to wait the 30 days to change it again.

I've e-mailed eBay CS about this, but has anyone been able to have eBay stop the username forwarding? Is closing this account and starting off completely new the only option? Is this an internal eBay issue (Is the call coming from inside the house!!!)? Thanks in advance!
 
I'm betting that he has clicked on links in emails thinking those messages were from ebay but they were really phishing emails. Has he gotten emails that appear to be from ebay and from which he has clicked a link to log in?

Any message that ebay sends should be in your (or his) "my ebay" if it's legit.
 
I'm betting that he has clicked on links in emails thinking those messages were from ebay but they were really phishing emails. Has he gotten emails that appear to be from ebay and from which he has clicked a link to log in?

Any message that ebay sends should be in your (or his) "my ebay" if it's legit.

He says he hasn't. Actually, ebay hasn't sent him any emails at all lately! They've been sending him messages within the eBay app that his username was changed, his contact info was changed, etc., which is useless when he's locked out of his account.

He turned on 2 factor authentication during his latest call, and within hours the hacker tried to access his account again. It's ridiculous. I have no idea why this "Tracey" person has such a hard-on for my husband's eBay account LOL
 
One of my friends was telling us about someone she knew who was being stalked by an ex. The ex could hack all her social media accounts even though she changed passwords. But she was always doing it from the same laptop. We suggested that the lady get her laptop checked for keystroke-logging spyware which would allow her ex to know all her new passwords as soon as she created them.
 
  • Like
Reactions: Jbizzybeetle
One of my friends was telling us about someone she knew who was being stalked by an ex. The ex could hack all her social media accounts even though she changed passwords. But she was always doing it from the same laptop. We suggested that the lady get her laptop checked for keystroke-logging spyware which would allow her ex to know all her new passwords as soon as she created them.
What a great suggestion!

I bet that's what it is; oftentimes, that's what happens when a phishing link is clicked.
 
One of my friends was telling us about someone she knew who was being stalked by an ex. The ex could hack all her social media accounts even though she changed passwords. But she was always doing it from the same laptop. We suggested that the lady get her laptop checked for keystroke-logging spyware which would allow her ex to know all her new passwords as soon as she created them.

This crossed my mind, but he only accesses eBay through the app on his phone/tablet and not our home computer. I'll have to check with him to see if he's logged in on his work computer.

Turning on 2-factor authentication seems to have secured his account, for now.
 
Top