Sorry about that, I didn't realize the link I sent earlier required login. The article is long so I'll post in two parts:
EBay goes far to fight fraud -- all the way to Romania
The country is the top source of organized scams on the auction site. The company has sent over equipment and a team to help the authorities there.
By Ian Wylie, Special to The Times
December 26, 2007
RAMNICU VALCEA, ROMANIA -- This small industrial center in the foothills of the Carpathian Mountains is not Albena Spasova's favorite destination. Driving the twisting highway makes her ill. Once she arrives, danger lurks.
U.S. Secret Service agents escort her, for her safety. Over the last two years, they have kept watch on dozens of trips, some lasting weeks, others months, as she has spent long days foraging through case files with local police and long nights holed up in one of the town's few hotels, with her windows locked.
"You don't know who to trust there. You can't use the hotel phone line. When you step outside, you can spot the local hackers in their cars, circling around," said Spasova, 33. "The Secret Service agents always book my accommodation and make sure I'm in a room next to them."
Ramnicu Valcea is an improbable capital of anything, but this obscure town is a global center of Internet and credit card fraud. And Spasova is an accomplished online fraud buster, helping to take down cyber-crime gangs across Romania. She isn't an FBI agent, though, nor a Romanian police officer.
Spasova works for EBay Inc.
No one, it turns out, does Internet auction fraud like the Romanians. Bulgarians specialize in intellectual property theft; Ukraine is a leader in online credit card crime; the Russians have a profitable niche in Internet dating fraud.
But when it comes to online auctions, particularly for big-ticket items such as cars that can yield $5,000 a scam, Romanians own the game. Romanian police estimate that cyber-crime is now a multimillion-dollar national industry, as important to organized criminals here as drug smuggling or human trafficking.
The Internet Crime Complaint Center, a partnership between the FBI and the National White Collar Crime Center, ranks Romania fifth in its table of naughty nations. But most experts agree that doesn't give Romanian criminals their due. Much of the cash being made on auction fraud reported as originating in the U.S., Canada, Britain, Spain or Italy is actually being picked up in those countries by Romanian money mules. An EBay fraud ring busted last year in Chicago, for example, has been traced to Pitesti, Romania.
EBay, which doesn't even operate a site in Romania, won't talk dollar figures but acknowledges that the country is the No. 1 source of "professional fraud." On a November 2006 visit to the Romanian capital, Bucharest, FBI Director Robert Mueller said the vast majority of Internet fraud committed on "one prominent U.S. online auction website is connected to Romania or Romanians."
That poses a problem for EBay. The San Jose-based auction giant has built its popularity and staked its reputation on self-policing feedback. Its system depends on buyers and sellers trusting one another -- to send money and to deliver the goods. Yet EBay users are the daily targets of phishing scams, spoof e-mails and fake listing attacks. Such schemes don't cost EBay any money. But some of its customers pay dearly. And they expect EBay to do something about it.
"The fraudsters need to know we're coming after them," said Rob Chesnut, Spasova's boss and a former federal prosecutor who set up EBay's Trust and Safety division. "EBay doesn't have a product. We are in the trust business: making people feel comfortable doing business with someone they don't know," he said. "If the bad guys have no fear of prosecution, they will continue to try to defraud users. So there has to be a cost to trying."
Romania is a grim place in more ways than one. Former pro-Nazi regime, then Soviet outpost, then weird Communist dictatorship and now developing nation: Per-capita income here is just one-third the European Union average. Fearing a flood of cheap labor, most European countries have barred or restricted Romanians from job hunting in their countries.
The country is dotted with shuttered factories, such as the Aerofina plant on the outskirts of Bucharest, opposite a potholed parking lot. This plant once built missile launchers and ejector seats for the Romanian air force's MiG-15s.
These days, though, there's something different going on here. Spread across the factory's dimly lighted third floor, 30 young Softwin computer programmers tap softly at their keyboards, tuning up the antivirus engines that power BitDefender, a software package starting at $25 that detects new computer viruses and releases programs to fight them.
In the last two years, BitDefender has been named a "Best Buy" by PC World magazine and garnered other kudos from Consumer Reports and the website TopTenReviews. IBM was impressed enough that it recently inked a deal to integrate BitDefender's anti-spyware and anti-virus smarts into its own virus prevention system.
Surprisingly, Romania has more than its fair share of homegrown computer security talent. Besides Softwin, the Bucharest firm GeCAD provided the technology for Microsoft's Windows Live OneCare anti-virus engine. Another half a dozen independent anti-virus companies, among them AxelSoft, Avira and Provision, are active in the capital; 11 more have been bought by foreign firms in the last four years.
Why here? "The respect for math is inside every family, even simple families, who are very proud to say their children are good at mathematics," said Radu Gologan, a senior research scientist at the Institute of Mathematics in downtown Bucharest.
And the country has years of experience with computers. In the 1980s, Romania was considered a Soviet satellite state, but dictator Nicolae Ceausescu hated bowing to the Russians. He refused to buy computers from Moscow, demanding that Romania build its own. While the Bulgarians built personal computers, Romania specialized in minicomputers such as the Felix C, based on Honeywell Bull's C11.
Florin Talpes, now a local entrepreneur, learned the art of reverse engineering at the Institute for Technology, Computing and Informatics.
"We would get hold of a minicomputer . . . and take it apart, reverse-engineering the operating system, the networking software, the hardware," Talpes said. "We developed a deep understanding, to the level of bits, of computing architecture, processing and software applications. We did it so that we could design a better operating system, better software, better hardware."
Forced to learn every bit of American silicon, every line of code, a generation of Romanians developed an aptitude for delving into the innards of machine code, using reverse engineering to deconstruct, anticipate and destroy viruses.
But if you're good at fixing the problems, you're also good at creating them. If you can stop viruses or Internet fraud, you're also in a position to make them happen.
'Second chance' scams
A classic Romanian scam is the "second chance auction." The mark: an EBay user who has narrowly lost an auction. The scammers can see that the user was prepared to spend, say, $145 on a particular item. They will then try to guess the user's e-mail address so that they can make contact off the EBay platform to offer a second chance to buy the item. Users commonly have the same e-mail address as their EBay user name, so the scammers may send out 50 e-mail messages using an EBay user name and the most common domain names such as Gmail, Hotmail and Yahoo.
The Romanian scammers then cook up elaborate stories to persuade their victims to send money via unrecoverable methods such as Western Union -- even instructing people not to tell Western Union the payment is for an EBay transaction, claiming Western Union will charge them an EBay surcharge of 10% (it doesn't), and instead to say they're sending money to their Romanian cousin.
FBI Special Agent Gary Dickson, who works out of the U.S. Embassy in Bucharast helping EBay and other Internet companies chase down online auction and credit card fraudsters, says Romanian criminals are getting smarter.
"These gangs are very professional and take pains to avoid being detected," Dickson said. "They are highly organized and compartmentalized and use lots of middlemen. Everyone has a different job to do, and they communicate in different ways to avoid being intercepted. The whole operation is run just like a business."
A typical gang might have a "copy and paste" department, responsible purely for e-mailing pre-written scripts in reply to questions from EBay bidders. Some workers might create or buy phishing or escrow websites; another acquires fraudulent credit card details; others get fake IDs for couriers. The gang might hire a dozen students via online job boards, renting them an apartment where they do nothing but copy and paste e-mails. After maybe three months, this "factory" will disband as the gang moves elsewhere.
It's old-style fraud using high-tech tools. Romanian scammers are fond of using prepaid wireless modems that make it easier for them to avoid being traced. Some gangs also set up their own Internet service providers to escape or delay detection.