Phishing Warning - Don't take the bait...

Amy_TradingPost — Tue, 29 Sep 2009 13:59:31 GMT

Phishing Email or Phishing SMS messages

Some Trading Post users have recently received a phishing SMS or email message asking them to log into the Trading Post website though a link provided in the message.

This message did not originate from Trading Post but from a malicious third party.

The purpose of this message is to steal username and password details and allow unauthorised access to Trading Post accounts.

Trading Post will never send you a message asking you to log into the site through a link and you should always log on by clicking “My Stuff” from the Trading Post homepage and entering your details.

Identifying a phishing email or SMS can be tricky as they may use the Trading Post logo. However, you should be wary if the message contains any of the following:

A request for urgent action – the message may threaten account suspension or other action if you do not log in through the link.
Offers of payment - the sender wants to organise payment for an item that you have not listed for sale.
A link to a website that looks like Trading Post but which has a different web address from the Trading Post website.
The offer of a cash prize for logging in through the link.
A request to confirm personal or financial details such as Credit Card number.
Poor grammar or spelling errors.
A request to transfer money by Western Union money transfer.

If you ever receive a message that you believe is fraudulent then you should forward the original message to the following email address:

investigations@tradingpost.com.au

Example 1: Recent phishing email

From: <xxx@emailladdress
Subject: your tradingpost item
To: xxx@emailaddress

Hi ,

I have bought your item. How can i pay you for this item ?
Please let me know if this is your item :

http://tradingpost-online-sales.9k.com/AdNumber-TP002758753-loginpagedZViewitem.html

Thank you

Example 2: Phishing email

From: xxx
Sent:
To: xxx
Subject: your tradingpost item

This is an automated email

Hi,

It has come to our attention that your account is out of date. This require you to verify your account as soon as possible.

Please login on before September 29, 2009. A failure to login may result on a suspension of your account. Click on the link below to verify your Trading Post records:

Click here

This statement will help us continue to offer Trading Post as a secure place to buy and sell. This is also a new Trading Post security statement which goes according to the established norms on our Terms & Conditions.

We appreciate your cooperation and assistance.

Happy trading!

The Trading Post Team
www.tradingpost.com.au

Example 3: Phishing SMS

TradingPost.com.au
SMS ID: AU8DN4218UG
Congratulations! You won the $1500.00 cash prize!
Please visit http://sms.tradingpost-prize.co.cc to claim your cash.

Discussion Forums / TRADE ONLINE SAFELY / Advice and Information for Trading Online / Phishing Warning - Don't take the bait... / Latest Posts

Phishing Warning - Don't take the bait...