How can I tell if a Web site is impersonating eBay?
If you receive email that includes links and requests sensitive information – be suspicious. A spoof email pretending to be from eBay typically contains a link that takes you to a fake Web site and requests that you sign in and submit personal and account information. eBay will never ask you for your password or sensitive information, such as your Social Insurance number.
When in doubt, use the eBay Web site. Open a new browser window, type www.ebay.ca, sign-in, and use the "site map" link to navigate the site.
Look at the Web address (URL). Never enter your eBay username and password on a page that doesn't have "ebay.ca" or "ebay.com" immediately before the first forward slash (/). If the address includes additional characters prior to the forward slash such as "@," dashes, etc., it is not an eBay page. Even if the Web address contains the word "eBay", it may not be an eBay Web site.
Examples of fake eBay addresses: http://email@example.com/ or http://signin-ebay.com/ or http://signin-ebay.ca/. The real eBay US address is https://signin.ebay.com/ and the Canadian address is https://signin.ebay.ca/
For a list of international sites, see Recognizing Spoof (Fake) Web Sites.
Check for a green Web address (URL) bar. eBay uses Extended Validation Secure Sockets Layer (EV SSL) technology. If you've upgraded to a browser with the latest anti-phishing capabilities, look for a green Web address bar to confirm that you are on a secure page before entering sensitive information.
Security Tip: You can use eBay’s free Toolbar with Account Guard to warn you when you are on a potentially fraudulent Web site. Learn more about Account Guard.