| 3P mule accounts have been a thing on eBay for years and eBay has been very much aware of it since at least 2015 when Brian Krebs wrote about it. https://krebsonsecurity.com/2015/11/how-carders-can-use-ebay... See also Confessions of a Nespresso Money Mule by Nina Kollars. https://www.youtube.com/watch?v=2IT2oAzTcvU In 2020, I personally reported 150+ hijacked eBay accounts used to commit $160k+ in triangulation fraud against a company I worked for at the time - eBay did very little to help. In February 2022, I collected about 80 reports from people who received 1099-Ks from eBay even though they had never knowingly created an account on the site - their PII (names, addresses, and in some cases even correct SSNs) were used to create fraudulent accounts that sold tens of thousands of dollars each with no vetting or verification of any kind by eBay. And all of that is a tiny drop in the bucket. I place a lot of the blame for where we are, and why this legislation ever came to be, squarely on the marketplaces. They've known about rampant fraud and scams for years, could have put in stricter vetting and verification procedures, invested more in highly trained human powered Trust & Safety to deal with counterfeits and fraud etc. but for the most part they have done the minimum required to cover their own "assets" and nothing more...which still left room for a lot of consumer harm to be done. While I don't think this will curb all of the fraud, like you said they will likely just jump to new accounts, having to produce actual documents to match the stolen PII may at least slow them down a bit. |