Full Version: Another Paypal scam

From: Cody (BOBTNAILER) [#1]
 14 Mar 2007

I know that many of you get this kind of stuff all the time, but this is the first time I can KNOW that I've received a phishing email.

Here's the text:

We recently noticed one or more attempts to log in to your PayPal account from a foreign IP address.

If you recently accessed your account while traveling, the unusual log in attempts may have been initiated by you. However if you are the rightful holder of the account,click on the link below to log into the account and follow the instructions.


If you choose not to complete the request, you give us no choice but to suspend your account temporary.

It takes at least 72 hours for the investigation in this case and we strongly recommend you to verify your account at that time.

If you received this notice and you are not the authorized account holder, please be aware that it is in violation of PayPal policy to represent oneself as an other PayPal user.Such action may also be in violation of local, national, and/or international law. PayPal is committed to assist law enforcement with any inquires related attempts to missapropriate personal information with the intent to commit fraud or theft. Information will be provided at the request or law enforcement agencies to ensure that perpetrators are prosecuted to the fullest extent of the law.

Thanks for your patience as we work together to protect your account.

PayPal Account Review Department.


Please do not reply to this email. This mailbox is not monitored and you will not receive a response.
For assistance, log in to your PayPal account and click the Help link located in the top right corner of any PayPal page.


PayPal Email ID PP00145

(I added the italics)

The link in the text SHOWS to be paypal.com, but when you view the source code, you see that it's actually going to another site altogether. The site that it actually wants to take you to is: http://adsl-66-121-176-41.dsl.lsan03.pacbell.net/paypal/cgi-bin/webscrcmd=_login-run/update.php.

Just another scam....can't these folks just get a job like the rest of us?

EDITED: 15 Mar 2007 by HARVEY-ONLY

From: Barbara (RGILE) [#2]
 15 Mar 2007
To: Cody (BOBTNAILER) [#1] 15 Mar 2007

Wow! I hate to say it, but that one really scares me. I would have thought that one was ok.
Most of the time, I do not respond to anything from ebay or paypal. I go to the website to update things if necessary. Guess I am going to continue that habit.
I don't go to ebay to buy anymore, because I am a little scared to do it now that so much is going on with it.
I did have someone go in and change my password once, and it wasn't me.
That was enough for me.


From: Cody (BOBTNAILER) [#3]
 15 Mar 2007
To: Barbara (RGILE) [#2] 16 Mar 2007


You are wise to NOT do anything with the eBay and Paypal emails, and to continue to "update" things directly from their websites.

I was interested in finding two major issues when I began reading this email: #1) The threat of impending doom, and #2) The flagrant errors in grammar.

In all the emails I've gotten from the legitimate Paypal, I've never found spelling or grammatical errors. Most of these spoofs are full of them. One of the biggest red flags for me is the misuse of adverbs. I guess many people not familiar with English don't grasp the proper use of them.

Did this one worry me? Nah. The moron that wrote it gave himself away.



From: BratDawg [#4]
 16 Mar 2007
To: Cody (BOBTNAILER) [#3] 16 Mar 2007

Although I know better than to follow those links, that's one of the nice things about using Eudora as a mail program. As soon as you move your mouse over the link, it instantly pops up with a warning that the actual address is different from what is shown!

You're correct though that just looking at the grammar and/or spelling is usually enough to give it away...not to mention the greeting "Dear customer". :-)

From: Vicky (ANDERI) [#5]
 16 Mar 2007
To: BratDawg [#4] 16 Mar 2007

...not to mention the greeting "Dear customer".
Exactly. PayPal and EBay will address you by name in a legitamate e-mail. "Dear Customer" is the first sign that it's a scam. If you're using Outlook, you can hover over the link and it'll show you the true path at the bottom of the page. ;-)

Back to thread list | Login

© 2022 Project Beehive Forum