How Phishing Works

Phishers create a replica page of a major site that appears to be part of the company's site, using the web page code.

Phishers then send out deceiving e-mails with a link to this page, asking for the user's credit card data or password.

When the form is submitted, it sends the data to the scammer while leaving the user on the company's site so they don't suspect a thing.

An Example of Phising

The following is an example of a phishing e-mail.

From: eBay Billing Department <aw-confirm@ebay.com>
To: xxx@aschool.edu
Subject: Important Notification

Register for eBay Dear valued customer Need Help? We regret to inform you that your eBay account could be suspended if you don't re-update your account information. To resolve this problems please click here and re-enter your account information. If your problems could not be resolved your account will be suspended for a period of 3-4 days, after this period your account will be terminated.

For the User Agreement, Section 9, we may immediately issue a warning, temporarily suspend, indefinitely suspend or terminate your membership and refuse to provide our services to you if we believe that your actions may cause financial loss or legal liability for you, our users or us. We may also take these actions if we are unable to verify or authenticate any information you provide to us.

Due to the suspension of this account, please be advised you are prohibited from using eBay in any way. This includes the registering of a new account. Please note that this suspension does not relieve you of your agreed-upon obligation to pay any fees you may owe to eBay.

Regards, Safeharbor Department eBay, Inc The eBay team. This is an automatic message. Please do not reply.