Another PayPal Scam - WARNING

skyblueheroes · 13-03-2005, 19:11

Got this mail.......................

Dear PayPal valued member,

PayPal is committed to maintaining a safe environment for
its community of buyers and sellers.

To protect the security of your account, PayPal employs
some of the most advanced security systems in the world
and our anti-fraud teams regularly screen the PayPal
system for unusual activity.

Recently, our Account Review Team identified some unusual
activity in your account.

In accordance with PayPal's User Agreement and to ensure
that your account has not been compromised, access to
your account was limited.

To restore your account please click on the link bellow:

http://www.paypal.com/cgi-bin/webscr?cmd=_login-run

If you fail to restore your account access by the date
shown below, your account will be closed.

This notification expires on the 15th of March, 2005.

Sent to PayPal, and got this back......................

Thank you for contacting PayPal.

We appreciate you bringing this suspicious email to our attention. We
can confirm that the email you received was not sent to you by PayPal.
The website linked to this email is not a registered URL authorized or
used by PayPal. We are currently investigating this incident fully.
Please do not enter any personal or financial information into this
website.

If you have surrendered any personal or financial information to this
fraudulent website, you should immediately log into your PayPal Account
and change your password and secret question and answer information. Any
compromised financial information should be reported to the appropriate
parties.

If you notice any unauthorized activity associated with your PayPal
transaction history, please immediately report this to PayPal by
following the instructions below:

1. Log in to your account at https://www.paypal.com/ by entering
your email address and password into the Member Log In box

2. Click on Security Center at the bottom of the page

3. Click on the 'Unauthorized Transaction' link under the Report a
Problem column

4. Please follow the instructions in order to access the appropriate
form

If you have any further questions, please feel free to contact us again.

Sincerely,
PayPal Account Review Department

Marge · 21-03-2005, 20:08

I got this one today, have to say made me think twice

You have added watchseller@yahoo.com as a new email address for your
PayPal account.

If you did not authorize this change or if you need assistance with
your account, please contact PayPal customer service at:

https://www.paypal.com/row/wf/f=ap_email

Thank you for using PayPal!
The PayPal Team

Please do not reply to this e-mail. Mail sent to this address cannot be
answered. For assistance, log in to your PayPal account and choose the
"Help" link in the header of any page.

allieyoung666 · 21-03-2005, 20:21

~I got one to and it went straight into spam, and then I contacted paypal.

handyman · 21-03-2005, 21:45

Quote:

Originally Posted by Marge

I got this one today, have to say made me think twice

You have added watchseller@yahoo.com as a new email address for your
PayPal account.

If you did not authorize this change or if you need assistance with
your account, please contact PayPal customer service at:

https://www.paypal.com/row/wf/f=ap_email

Thank you for using PayPal!
The PayPal Team

Please do not reply to this e-mail. Mail sent to this address cannot be
answered. For assistance, log in to your PayPal account and choose the
"Help" link in the header of any page.

When I click on that link it takes me to paypal with the correct email address for my paypal accoun, which most of the time even I cant remember, very strange.

Mac-the-T · 21-03-2005, 22:24

It did for me too. When you go to Paypal's log on page (and many other sites) the web page pulls some info from a cookie or something on your PC and partly fills in the form for you. So I suppose its not too hard for phishers to do the same.
Frightening

jellybaby · 21-03-2005, 22:29

Very clever....even got the secure login...would easily fool many people

allieyoung666 · 21-03-2005, 22:38

I am always wary when I get messages, if in doubt bin it!

hoggyspuds · 21-03-2005, 22:45

Quote:

Originally Posted by allieyoung666

I am always wary when I get messages, if in doubt bin it!

if only everyone was as vigilant!!....obviously it works or else they wouldn't do it. Any e-mail asking you to log in, give cedit card details, etc........bin it!

Marge · 21-03-2005, 22:49

I logged in using f**koff@ntlworld.com, password cheeky b*stard and funnily enough it let me straight in

TheBlueRaja · 21-03-2005, 23:20

I had a cracker the other week, great timing on their part too from some scammer pretending to be from Ebay saying that my Credit card had expired and they couldn't take my monthly fee - damn I thought - that's right I forgot to update it after I got nabbed by some get in the states (see Banks, Fraud and the Internet @ http://www.cableforum.co.uk/board/sh...ad.php?t=23883 to see what happened) and cancelled my card - so I clicked on the link.

Thunderbird then warned me it was going to an IP address instead of Ebay and that it could be a hoax.

Thank Christ it did too - as that would have got me hook, line and sinker.

What worries me was that im extremely careful about these things but everything just fitted at the time and if it wasn't for Thunderbird warning me - well - I don't want to think about it.

A moments carelessness.

hoggyspuds · 21-03-2005, 23:50

Quote:

Originally Posted by TheBlueRaja

I had a cracker the other week, great timing on their part too from some scammer pretending to be from Ebay saying that my Credit card had expired and they couldn't take my monthly fee - damn I thought - that's right I forgot to update it after I got nabbed by some get in the states (see Banks, Fraud and the Internet @ http://www.cableforum.co.uk/board/sh...ad.php?t=23883 to see what happened) and cancelled my card - so I clicked on the link.

Thunderbird then warned me it was going to an IP address instead of Ebay and that it could be a hoax.

Thank Christ it did too - as that would have got me hook, line and sinker.

What worries me was that im extremely careful about these things but everything just fitted at the time and if it wasn't for Thunderbird warning me - well - I don't want to think about it.

A moments carelessness.

golden rule....ebay / paypal will never send you an e-mail to update any details. Forward any suspicious e-mails to spoof@ebay.co.uk

Marge · 21-03-2005, 23:53

Part Two has just arrived

This email confirms that you have added the following address to your
account:

1515 6th Street
Manhattan Beach, CA 90266
United States

If you did not authorize this change or if you need assistance with
your account, go to :

https://paypal.com/webscreen=?cmd_re...okie?newadress

Sincerely,
PayPal

22-03-2005, 00:07

Quote:

Originally Posted by handyman

When I click on that link it takes me to paypal with the correct email address for my paypal account, which most of the time even I cant remember, very strange.

That's maybe because the link as shown here does go to PayPal - but I suspect that in the original e-mail that it was in the actual URL was not the same as the one displayed.

The simple rule of thumb with anything like this is DO NOT use the link in an e-mail to access a service unless you can be 100% certain the link is for that service. I do not believe that any of the reputable services (i.e. banks etc. and including PayPal) will ever send you an email asking you to log into their service in this manner.
Always check that the displayed URL and the actual URL are the same.
Alternatively - access the service through your usual URL and check the status there.

Be paranoid - they may be out to get you after all!

__________________

Quote:

Originally Posted by Marge

I logged in using f**koff@ntlworld.com, password cheeky b*stard and funnily enough it let me straight in

I have done this with these gits before.
Follow the link but be sure to provide them with useless data. With a bit of luck by using said useless data they may even provide a trail back to themselves.
I guess the downside of doing so is that you may provide them with your IP - that in turn may get them to turn their attention to your PC instead.

BEWARE - there be dragons!

ntluser · 24-03-2005, 16:32

If you do get a Paypal spoof e-mail you can forward it to spoof@paypal.com, making sure that you paste in the internet headers from the original e-mail on your machine.

Quite a few banks are having this spoof e-mail problem, so it is an issue which needs to be dealt with.

Hopefully, Paypal's security staff will be able to track down who is sending them and put them out of business.

Monster Jedi · 24-03-2005, 19:13

I use always reply to these links but I might give em false details. The details I give I can't say on here