PayPal account membership - email received from scammer.

By joining our community you will have the ability to post topics and access other forums reserved for members. Registration is quick, simple and absolutely free. Join our community today by clicking here.

Hello I'm New here! Joined: 31 May 2006 Posts: 13

PayPal member email received from scammer
Sat, 03 Nov 2012 7:31:35 AM

I received this email today claiming something wrong my account (there's nothing wrong with it).

Numbers [1,2,3] have the website addresses listed below with the same number.

I've deleted a part of the header that is just a series of alphanumerics as this does not seem important to me, but if you need to see it just message me.

The message in full is between the dashes ---

-------------------------------------------------------------------------------

Final reminder: Your account has been limited
Show Details

Dear PayPal[1] member,

We emailed you a little while ago about an issue with your account. Because
of this issue, we've limited what you can do with your account.

What's the problem?

Your account was accessed by a third party who changed some of your account information. We understand it's frustrating and inconvenient to have your account permanently limited, but this is a security measure intended to help protect you and your account.

What to do next?

For reasons relating to the safe use of the PayPal service we need you
to update your account information, click the link below to update now.

Update your account now.[2]

You are strictly advised to match your details correctly to avoid suspending your account as it may have been used for fraudulent purposes.

Yours sincerely,

PayPal

This mailbox is not monitored and you will not receive a response.

Copyright © 1999-2012 PayPal. All rights reserved.

-------------------------------------------------------------------------------
[1] http://links.mkt2944.com/ctt?kn=1&ms=MzY3NDgyOTkS1&r=MTUxNjQwMjc0NTAS1&b=0&j=MTI1MTM1OTEwS0&mt=1&rt=0

[2] http://accountpaypal.com.uk.uio6ks2u3xo8b2c1n2jm3dx2s7v5u2v5u2tl4o7btjk.k13jm3dx2s7v5uk1xble4efc1m3dxk41p47fiu95den7m3752m3e4f.textureshair.ca/

[3]
FULL HEADERS:

From PayPal Fri Oct 26 09:29:32 2012
X-Apparently-To: [email protected] via 72.30.236.137; Fri, 26 Oct 2012 09:29:32 -0700
Return-Path: <[email protected]>
Received-SPF: none (domain of server.atlas-hosting.com does not designate permitted sender hosts)
X-Originating-IP: [198.15.76.202]
Authentication-Results: mta1367.mail.mud.yahoo.com from=paypal.gov; domainkeys=neutral (no sig); from=paypal.gov; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO server.atlas-hosting.com) (198.15.76.202)
by mta1367.mail.mud.yahoo.com with SMTP; Fri, 26 Oct 2012 09:29:32 -0700
Received: from javahand by server.atlas-hosting.com with local (Exim 4.80)
(envelope-from <[email protected]>)
id 1TRmmq-0001xS-00
for [email protected]; Fri, 26 Oct 2012 23:29:32 +0700
To: [email protected]
Subject: Final reminder: Your account has been limited
From: PayPal <[email protected]>
Reply-To:
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Message-Id: <[email protected]>
Date: Fri, 26 Oct 2012 23:29:32 +0700
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server.atlas-hosting.com
X-AntiAbuse: Original Domain - yahoo.com
X-AntiAbuse: Originator/Caller UID/GID - [578 577] / [47 12]
X-AntiAbuse: Sender Address Domain - server.atlas-hosting.com
Content-Length: 3670

Posted: Fri Nov 02, 2012 10:24 pm

Pretty standard phishing mail. All too common and sadly unbaitable. Report linked sites to Phishtank, and use the phishing report button in gmail or whatever your provider is. Not much else you can do really.

Elite Baiter Joined: 19 Jan 2009 Posts: 1440

People need to know that if PayPal sends you an email, they address it to YOU, not "Dear PayPal member".

Your second link doesn't work for me, but this is a phishing mail, not 419 scam.

ETA: Ooops - Ninja'd, nailgunner!

Posted: Fri Nov 02, 2012 10:43 pm

^

They may well be dead by now. Unlike fake banks which are usually well hidden, and given out to select victims only, phishing sites are public and easily found as they are bombed to thousands of addresses. This exposure can see them off in hours so its not worth filing reports as we would for fake banks or couriers. They really rely on a quick smash and grab approach rather than the long con of regular 419 fraud.

Posted: Fri Nov 02, 2012 11:29 pm

Quote:

Fake PayPal emails – phishing
Advice on how to handle "phishing" attempts to steal your personal information. Avoid email scams and spot fake emails claiming to be from PayPal.

You may receive a fake email that claims to be from PayPal. Sending fake emails is called "phishing" because the sender is "fishing" for your personal information.

The email may ask you to:

Visit a fake or "spoof" website and enter personal information.
Call a fake Customer Service number.
Click an attachment that installs malicious software on your computer.

If you suspect an email is fake, don't open it. Don't reply to the email, click any links, or download any attachments. If you have clicked a link or opened an attachment from a suspicious email, report the phishing email or spoof site as soon as possible so we can help protect you and other PayPal members. Please forward any suspicious emails to [email protected]. Then, delete the suspect email.

To learn more about how to avoid phishing, read our Identity Protection Guide.

How to protect yourself from fake emails

When you aren't sure if you can trust an email claiming to be from PayPal, here are 2 guidelines that can help you to spot the real from the fake:

PayPal emails will always use your first and last name, or your business's name.
PayPal emails will never ask for your personal or account information such as credit or debit card numbers, bank account details, driver's license number, email addresses, or passwords.

Never click a link in an email that requests personal information.

Any time you receive an email about your PayPal account, the safest and easiest thing to do is to open a new browser, enter https://www.paypal.com, and log in to your account. You can also send us an email by clicking on the "Contact Us" link at the bottom of every PayPal webpage.

Verify the email in your inbox

To verify that an email came from PayPal, you can use a free app from our friends at Iconix. It's called Truemark® Email ID. It works with your computer's email program and many web-based email services.

If a PayPal email is real, you will see a gold lock with a check mark displayed next to the sender's logo. If it isn't, you won't. It's that simple.

Posted: Fri Nov 02, 2012 11:50 pm

Superb advice from Morgain, I'd forgotten about the spoof address. Other companies may have similar systems for reporting and these should take very rapid action against the phishers.

Posted: Sat Nov 03, 2012 1:27 pm

^^ I cannot take full credit for that about PP, I just "lifted" it from the site and remembered it because I have had to use that a couple times in RL situations.

And I have gotten some phishing attempts that appeared to be from my credit union and bank, so reporting them has been etched onto my brain

PayPal account membership - email received from scammer.	View next topic View previous topic