Monday, July 28, 2008
My Stolent eBay Identity!
I awoke on Friday and decided I wanted to check out my ebay account. It had been 8 months since the last time I had tried, unsuccesfully, to log in. Well, to no big surprise, I still couldn't login. I sent myself a password reminder. It never came to my email address. I tried to reset my password. No luck. All the info had apparently been changed.
A few hours later and several excruciating and painful online chat sessions with ebay fraud, I finally had my account back. Someone had been selling goods, about $5,000/month in goods, in my good name. I felt violated. For real. Someone had been impersonating me. Even responding to emails with my name. Damn. They had access to my paypal account too. Fortunately, they didn't steal anything. At least not my knowledge.
I would have expected eBay to have been all over this. Starting an investigation or whatnot. Who was I kidding? Why would someone like ebay want to pursue this and make their site safe? Besides the obvious reasons. Ebay actually said they couldn't pursue anything on my behalf. That I had to file a police report and then the police would have to work with them. Ok...so I'll just do that. That shouldn't be too hard.
Well, I called my local PD and they wouldn't even file a report. They basically said there was nothing they could do since there was no monetary loss. And thus, most people would have let the trail die. But not me.
Damn. I had this guy's IP address, which at the very least linked back to a Comcast ISP in New Hampshire (22.214.171.124) - because he tried to reset the password last night and it sent me the IP address where the reset originated from. I had this guy's name or alleged name: Seybou (or Seybuo) Hamidou. I had his PO Box in New york: PO Box 59, New York, NY 10113. I even had his credit card attached to my account. But I couldn't see anything but the last four digits: 2009. That's a lot of info.
I searched through all of the exchanged messages from my account over the last month (since that's all they keep). I found a few tracking numbers from UPS and the USPS. And I knew he had a Discover card.
With all this information, you'd think it would be easy. So I did some more research. I filed a complaint with the FTC and with IC3 (the FBI's identity theft complaint division). I also researched identity theft - and though I suffered no monetary loss, that didn't seem to matter. This is what I found:
Under federal criminal law, identity theft takes place when someone “knowingly
transfers, possesses or uses, without lawful authority, a means of identification
of another person with the intent to commit, or to aid or abet, or in connection
with, any unlawful activity that constitutes a violation of federal law, or that
constitutes a felony under any applicable state or local law.” Under this definition, a name or Social Security number is considered a “means of identification.” So is a credit card number, cellular telephone electronicserial number, or any other piece of information that may be used alone or in conjunction with other information to identify a specific individual.
Now that I was equipped with some knowledge, I went back to the police department and filed a police report, which they finally took. Now I need to wait to hear from the detective and hopefully they'll actually do something. I'm not really holding out hope...so I'm working on tracking this dude down myself. You'd think that they'd make it easy to go after criminals. But it's not. With all the hoops I'm having to jump through and the research I'm having to do on my own, it's no wonder that most e-criminals never get caught. I mean, what the hell?
I'll keep you posted. I've included all the information I have on this guy. Feel free to track him down. If you live in NY. Stake that PO Box out. That would rule.