Full Version: Another Paypal scam
From: Cody (BOBTNAILER) [#1]
14 Mar 2007
To: ALL
Here's the text:
We recently noticed one or more attempts to log in to your PayPal account from a foreign IP address.
If you recently accessed your account while traveling, the unusual log in attempts may have been initiated by you. However if you are the rightful holder of the account,click on the link below to log into the account and follow the instructions.
https://www.paypal.com/us/cgi-bin/webscr?cmd=_login-run
If you choose not to complete the request, you give us no choice but to suspend your account temporary.
It takes at least 72 hours for the investigation in this case and we strongly recommend you to verify your account at that time.
If you received this notice and you are not the authorized account holder, please be aware that it is in violation of PayPal policy to represent oneself as an other PayPal user.Such action may also be in violation of local, national, and/or international law. PayPal is committed to assist law enforcement with any inquires related attempts to missapropriate personal information with the intent to commit fraud or theft. Information will be provided at the request or law enforcement agencies to ensure that perpetrators are prosecuted to the fullest extent of the law.
Thanks for your patience as we work together to protect your account.
PayPal Account Review Department.
--------------------------------------------------------------------------------
Please do not reply to this email. This mailbox is not monitored and you will not receive a response.
For assistance, log in to your PayPal account and click the Help link located in the top right corner of any PayPal page.
--------------------------------------------------------------------------------
PayPal Email ID PP00145
(I added the italics)
The link in the text SHOWS to be paypal.com, but when you view the source code, you see that it's actually going to another site altogether. The site that it actually wants to take you to is: http://adsl-66-121-176-41.dsl.lsan03.pacbell.net/paypal/cgi-bin/webscrcmd=_login-run/update.php.
Just another scam....can't these folks just get a job like the rest of us?
EDITED: 15 Mar 2007 by HARVEY-ONLY
From: Barbara (RGILE) [#2]
15 Mar 2007
To: Cody (BOBTNAILER) [#1] 15 Mar 2007
Most of the time, I do not respond to anything from ebay or paypal. I go to the website to update things if necessary. Guess I am going to continue that habit.
I don't go to ebay to buy anymore, because I am a little scared to do it now that so much is going on with it.
I did have someone go in and change my password once, and it wasn't me.
That was enough for me.
Barb
From: Cody (BOBTNAILER) [#3]
15 Mar 2007
To: Barbara (RGILE) [#2] 16 Mar 2007
Barb,
You are wise to NOT do anything with the eBay and Paypal emails, and to continue to "update" things directly from their websites.
I was interested in finding two major issues when I began reading this email: #1) The threat of impending doom, and #2) The flagrant errors in grammar.
In all the emails I've gotten from the legitimate Paypal, I've never found spelling or grammatical errors. Most of these spoofs are full of them. One of the biggest red flags for me is the misuse of adverbs. I guess many people not familiar with English don't grasp the proper use of them.
Did this one worry me? Nah. The moron that wrote it gave himself away.
Cody
From: BratDawg [#4]
16 Mar 2007
To: Cody (BOBTNAILER) [#3] 16 Mar 2007
You're correct though that just looking at the grammar and/or spelling is usually enough to give it away...not to mention the greeting "Dear customer". :-)
From: Vicky (ANDERI) [#5]
16 Mar 2007
To: BratDawg [#4] 16 Mar 2007