[ Bruce Clark wrote in 050227 MMDigest:


>> Simple test for fraud:  When asked for a password, make one up;
>> use a fake one.  If the site is fraudulent it will accept it.


Not always true!  I recently received an email, purportedly from eBay,
which sent me to a secured login page looking very, very similar to
eBay's real login page.  I logged in with a bogus user and password,
and the site responded with an invalid user error.  I suspect the
software behind the site immediately tried to login to eBay's site and
having been rejected it sent me back a rejection!  So be very, very
careful before you assume that a rejected bogus login means it's a
legitimate site.  (By the way, I did confirm with eBay that the site
was a phish).

Dale Dohler