Interesting... I had a phishing message sent to me using their own messaging system asking me to log on and pay my unpaid eBay bill. Lookde very convincing except whn I hovered over the link the status bar showed a suspicious address.

The help system tells advised me to forward the message to them at spoof@ebay but the eBay message system only allows you to forward messages to your own address. They obviously believed that spoofs can't be sent via their message system.

When I contacted them about it I got two automated responses, the first to confirm my original message, the second to say that I hadn't forwarded the message. Obviously no one at eBay is really that interested in security as they ought to at least read what you sent them rather than relying on a computer?

Even more strangely, the message has disappeared from my message box and it wasn't me that deleted it! Nor have eBay advised me that they have deleted it for me.

Maybe I just imagined I saw the message...