Fake eBay Product Recall Refund Scam
Scammers send phishing emails pretending to be eBay, claiming a seller's product has been recalled and that you are owed a refund — but the link harvests your login and payment credentials.
Part of: Fake Product Recall Refund Scams
Last reviewed: 8 June 2026
eBay facilitates millions of second-hand and brand-new product sales, and its buyers are accustomed to receiving email communications about their orders. Criminals exploit this by issuing fictitious product-recall notifications that mimic eBay's email design precisely.
The emails claim that a product you purchased was found to violate safety standards and that eBay is proactively refunding all affected buyers. To receive the refund, the message instructs you to click a link and verify your payment method — a step that does not exist in eBay's real recall or refund process.
eBay's actual Money Back Guarantee refunds are initiated from within 'My eBay' and processed back to the original payment source. No re-entry of card details or PayPal credentials is ever required simply to receive a refund that eBay has already decided to issue.
How this scam works on the eBay brand
The phishing email typically reproduces eBay's colour scheme and footer links faithfully, but the 'From' address is on a domain like 'ebay-notifications.net' or 'ebay-refunds.info'. The body states that a specific product category — for example, a phone charger or children's toy — has been recalled and lists a fake case reference number.
The embedded button reads 'Claim Your Refund Now' and directs victims to a lookalike eBay sign-in page. After logging in, a second page requests card or PayPal details 'to confirm the account that will receive the refund'. This is the data the scammer was after from the start.
Some campaigns add an artificial timer — 'This offer expires in 12 hours' — to prevent victims from pausing to verify the claim on eBay's actual website.
Common red flags
- Email sender domain is anything other than '@ebay.com' — legitimate eBay mail arrives from ebay.com subdomains only
- You are asked to click a link to re-enter your PayPal or card details to receive a refund eBay has already initiated
- The recall references a vague product type rather than a specific item in your purchase history
- Your real eBay account shows no messages, no open cases, and no pending refunds when you log in directly
- Aggressive deadline language designed to prevent you from checking your account before acting
- The 'eBay' sign-in page URL in the address bar is not ebay.com
How to protect yourself
- Go directly to ebay.com and check 'My eBay > Purchase History' for any official communications about recalls or refunds
- Never click links in emails claiming eBay owes you money; navigate to eBay yourself and look for messages in your account inbox
- Install a browser extension that detects lookalike phishing domains
- Enable two-factor authentication on your eBay account at ebay.com/help/account/two-step-verification
- If you entered credentials on a fake page, change your eBay and PayPal passwords immediately
- Alert your bank if you provided card details
How to report it
- Forward the phishing email to [email protected] — eBay's dedicated anti-spoof team reviews submissions
- Report to the FTC at reportfraud.ftc.gov
- If financial details were compromised, contact your card issuer or PayPal's resolution centre
- File a report with the IC3 at ic3.gov if money was lost
Frequently asked questions
Does eBay ever proactively issue recall refunds?
eBay may contact buyers when safety issues are identified, but any refund communication will be visible inside your eBay Messages inbox at ebay.com and will not require you to re-enter payment details.
How do I verify whether a product recall is real?
Check the CPSC recall database at cpsc.gov/recalls and look for a corresponding message in your real eBay account inbox — not just in your email client.
I clicked the link but did not enter anything — am I safe?
Simply visiting the page likely did not cause harm, but run a reputable malware scan as a precaution and clear your browser cache.