Today I came across a sad tale of a parent defrauded trying to buy a Christmas present. Even in the holiday season there are those mean enough to take advantage.
This parent wanted to buy tickets for the extremely popular Hannah Montana tour and found some for sale on eBay. After contacting the seller and agreeing a price she received an official looking email with payment instructions. It's a long email, you can see the full version here but here are a few extracts:
... it looks good so far...
... but now we start to see something suspicious ...
Grammatical errors, such as 'we learn every eBay member' are typical of fraudulent email. The real key to recognizing this fraud though is in the email address of the sender:
This is not an eBay address although it is designed to fool the unwary.
Taking advantage of the tools available to researchers I can see that this domain was only registered a few weeks ago, in early October. Recently registered domains are another good sign of suspicious activity.
Sadly it seems this scammer has pocketed a hard working parent's money. As ever, be careful out there, not everyone believes that this is the season of goodwill.