Criminals were able to change payment details on several eBay listings, enabling them to siphon money from unwitting customers who paid for goods via a PayPal account. PayPal enables customers to send and receive money via an email address. The fraudsters used an email address that looked almost identical to Currys PC World's real account.
After accessing the retailer's eBay account, they replaced the real email on listings with a fake one. Shoppers who thought they were paying Currys PC World for their goods were instead sending money to the fraudsters, according to BBC.
The attack happened on the weekend of October 19-20, 2019, affected around 600 customers, and potentially cost hundreds of thousands of pounds.
Every day we send out a free e-mail with the most important headlines of the last 24 hours.
Subscribe now