RE: Web Scams

["Matt Fisher" <mfisher () spidynamics com>]

Mike, 

There are multiple law enforcement authorities you can report this too - the challenge is in knowing which one actually 
has the jurisdiction and resources to pursue it.  A good start may be the Internet Fraud Complaint Center.  Although I 
personally don't know much about them, they appear to be at least affiliated with the Dept of Justice, and definitely 
specialize in issues like phishing : http://www.ifccfbi.gov/index.asp 

You could also try Infragard, which is a coop between the FBI and the private sector.  I know one of their goals is to 
help the "general public" understand how to report things to the Bureau, etc.  Their national site is 
http://www.infragard.net and they have local chapters as well.   You could also simply call your local FBI office - 
there's one in every major city. 

Regardless of which route you take with the authorities, you always want to report them to the organization being 
"faked" . They have a vested interest in tracking, ceasing, and preventing phishing scams.   I know that Citibank has 
reporting mechanisms, and Ebay does as well : http://pages.ebay.com/help/contact_inline/account_security.html .   

I would also encourage reporting it to community sites such as http://www.antiphishing.org/report_phishing.html .  

Good luck !

- Matt. 


-----Original Message-----
From: Lawrence, Michael [mailto:MLawrence () soroc com]
Sent: Wednesday, August 25, 2004 6:05 PM
To: webappsec () securityfocus com
Subject: Web Scams


Who other then the local autorities, does someone report a e-mail scam? I have received two now claiming to be from 
E-bay. The funny thing is I do not use e-bay at work, nor do I use my work e-mail for it. (which is where it was sent). 
The scam asks for all the information required for identity theft. (sin number, bank acount info, credit card info, 
e-bay information). 
Any input would be great. This e-mail has appeared in a couple of co-worker's inboxes.

Mike