Board logo

Pay Pal scam?
marktigere1 - 13/3/06 at 12:40 PM

Anyone else had this type of email recently?

"We recently noticed an attempt to log in to your PayPal account from France,a foreign IP address and we have reason to belive that your account was used by a third party without your authorization.

If you recently accessed your account while traveling, the unusual log in attempts may have been initiated by you. Therefore, if you are the rightful account holder, click on the link below to log into your account and follow the instructions.


https://www.paypal.com/cgi-bin/webscr?cmd=_login-run


If you choose to ignore our request, you leave us no choice but to temporarily suspend your account.

If you received this notice and you are not the authorized account holder, please be aware th at it is in violation of PayPal policy to represent oneself as another PayPal user. Such action may also be in violation of local, national, and/or international law. PayPal is committed to assist law enforcement with any inquires related to attempts to misappropriate personal information with the intent to commit fraud or theft. Information will be provided at the request of law enforcement agencies to ensure that impersonators are prosecuted to the fullest extent of the law.

Thank you for your patience as we work together to protect your account.

Sincerely,
PayPal Account Review Department
PayPal, an eBay Company"

Was addressed to my personal email, looks genuine but no way am I going to do anything with this without directly contacting Paypal.

Hate all this web crap

Cheers

Mark


ReMan - 13/3/06 at 12:43 PM

SCAM

You can often tell by the originating email address, theer a list of genuine ones on Ebay.


marktigere1 - 13/3/06 at 12:49 PM

Yep.

Just looked closly at the web address.

Wheres the UK bit?

Definate scam.

As said before, I hate this web crap

Cheers

Mark

PS. Not the forum of course


ianr - 13/3/06 at 12:51 PM

You should just check your paypal account, everything will show up.
Just check that you made all the transactions.

Things like

quote:

If you choose to ignore our request, you leave us no choice but to temporarily suspend your account


and
quote:

Thank you for your patience as we work together to protect your account




do not sound like paypal

[Edited on 13/3/06 by ianr]


Peteff - 13/3/06 at 12:55 PM

Click on the forward button in your email and send it on to spoof@paypal.com.


BKLOCO - 13/3/06 at 02:03 PM

All of these scams are simply phishing for your login and password.
They will accept anything so just type in COMPLETE as your username and B0LL0CKS as your password.
If it accepts it you know it's fake!
This obviously assumes that your username is not COMPLETE
and your password isn't B0LL0CKS


Liam - 13/3/06 at 03:04 PM

Eh I dont get it...

The wording of the email is definately like the scams, but the link is to the genuine secure paypal login. Exactly the same page as if you'd typed www.paypal.com in your browser and clicked login. So how can this be of any use to a scammer unless they have some nasty program running on your computer recording your key presses??

Liam


stevebubs - 13/3/06 at 04:07 PM

That's where it gets a little clever....

The email is typically an HTML-encoded mail which just displays the Link Name - not the URL. If you get into the source code of the email, the link will take you somewhere totally different.

Seen quite a few of these over the last few months.

Send straight onto spoof@paypal.com or spoof@ebay.com (seen e-bay ones too) and DON'T CLICK THE LINK.

Stephen


stevebubs - 13/3/06 at 04:12 PM

Bit like this one which mimiced the e-bay "respond now" button...

<TD align=middle><A
href="http://67.15.16.192/~test/ebay/index.html"
target=_blank><IMG alt="Respond Now"
src="http://pics.ebaystatic.com/aw/pics/uk/email/message/btnRespondNow.gif"
border=0
</a>


chockymonster - 13/3/06 at 06:25 PM

The other dead give away is the usual

"Dear Paypal User"

Paypal will always use "Dear Your Name"


stevebubs - 13/3/06 at 08:20 PM

quote:
Originally posted by chockymonster
The other dead give away is the usual

"Dear Paypal User"

Paypal will always use "Dear Your Name"


True but so do some of the more elaborate phishes.