"PayPal" Fraudulent E-Mails

Vince · 03-20-2006, 12:26 PM

So I just received an e-mail, official-looking enough to pass the duh test, that said that PayPal noticed a foreign IP Address using my account, and that they might suspend or delete my account if I did not verify that I was indeed, me. So I click the link, and go to the site...and they ask me to verify my billing information, including my ATM PIN number.

Warning flags going off like no tomorrow, I begin to look more closely. I can't find anything wrong with the so-called "PayPal Security Center" page I was on (aside from the fact that it was asking for things that I wouldn't expect would be necessary for verifying my identification), but the original e-mail had a spelling error in the title (two l's in until).

Just as a heads-up to anyone else -- be extraordinairily careful around this stuff. Most of us here aren't stupid, but it never hurts to be cautious.

Qwikshot · 03-20-2006, 12:29 PM

Quote:

Originally Posted by Vince

So I just received an e-mail, official-looking enough to pass the duh test, that said that PayPal noticed a foreign IP Address using my account, and that they might suspend or delete my account if I did not verify that I was indeed, me. So I click the link, and go to the site...and they ask me to verify my billing information, including my ATM PIN number.

Warning flags going off like no tomorrow, I begin to look more closely. I can't find anything wrong with the so-called "PayPal Security Center" page I was on (aside from the fact that it was asking for things that I wouldn't expect would be necessary for verifying my identification), but the original e-mail had a spelling error in the title (two l's in until).

Just as a heads-up to anyone else -- be extraordinairily careful around this stuff. Most of us here aren't stupid, but it never hurts to be cautious.

I get these all the time, and I forward them to the spoofs address that Paypal has.

KWhit · 03-20-2006, 12:29 PM

I've been getting those a lot lately.

TheOhioStateUniversity · 03-20-2006, 12:29 PM

I had a similiar email to this from "Ebay" after I sold an item. The only thing that caught it was Mozilla Thunderbird when I attempted to click the link.

JonInMiddleGA · 03-20-2006, 12:30 PM

Quote:

Originally Posted by Qwikshot

I get these all the time, and I forward them to the spoofs address that Paypal has.

Same here ... and I've never gotten one from the same address twice either.

JonInMiddleGA · 03-20-2006, 12:32 PM

Quote:

Originally Posted by Vince

... but the original e-mail had a spelling error in the title (two l's in until).

Heh, I've lost count of how many times I've seen that one.

And, while we are generally more savvy around here than the average 'netizen, I've seen a couple of eBay/PayPal fishing emails lately that were very good, much slicker & well-done than similar attempts I've gotten for credit cards, bank accounts, etc.

GrantDawg · 03-20-2006, 12:32 PM

Quote:

Originally Posted by KWhit

I've been getting those a lot lately.

Me, too. I just logged on to Paypal without using the link on the email and made sure everything is ok.

Cringer · 03-20-2006, 12:37 PM

I was getting a ton of these for a while. Has really slowed down for me the last month or so though.

miked · 03-20-2006, 12:40 PM

My brother got a bunch. You'd have to be pretty naive to think they'd need your PIN.

FrogMan · 03-20-2006, 12:40 PM

Quote:

Originally Posted by Vince

Warning flags going off like no tomorrow, I begin to look more closely. I can't find anything wrong with the so-called "PayPal Security Center" page I was on (aside from the fact that it was asking for things that I wouldn't expect would be necessary for verifying my identification), but the original e-mail had a spelling error in the title (two l's in until).

and aside from the fact that it's probably not hosted on the paypal website...

Can't believe people fall for these things. Every couple of months they show a news report on a slow news day about people who got suckered into giving away their C/C information after following one of those links...

FM

WSUCougar · 03-20-2006, 12:41 PM

Quote:

Originally Posted by miked

You'd have to be pretty naive to think they'd need your PIN.

And if you are, I've got a bunch of friends in Africa who inherited MILLIONS OF DOLLARS they'd like to share with you.

Huckleberry · 03-20-2006, 12:44 PM

Quote:

Originally Posted by FrogMan

and aside from the fact that it's probably not hosted on the paypal website...

This is key. While you were scouring the page looking for errors you most likely only needed to check the address bar on your browser. Everyone of these I've seen directs you to a website that has only the IP address of the server in the URL instead of the domain name.

mooreadamc · 03-20-2006, 12:45 PM

Yup, i've had the same thing sent to me except from eBay. Looked very real and included the exact HTML format in the e-mail that eBay normally sends. It asked me to verify my accoutn details but when you look at the http address it doesn't match eBay.

FrogMan · 03-20-2006, 12:47 PM

Quote:

Originally Posted by Huckleberry

This is key. While you were scouring the page looking for errors you most likely only needed to check the address bar on your browser. Everyone of these I've seen directs you to a website that has only the IP address of the server in the URL instead of the domain name.

yeah, I should have written "It's definitely not hosted on Paypal's website" instead. I saw a couple times where it sorta faked the address, superimposing some sort of paypal address over my link toolbar. Anybody know what I mean?

FM

Vince · 03-20-2006, 01:34 PM

Yeah, it probably would have been easy to spot. I was so flabbergasted at the request for my PIN, and the fact that I had followed the link even that far.

Aardvark · 03-20-2006, 01:39 PM

I keep getting email about my Barclays cheque card possibly not being secure. Of course, I don't have a Barclays card, and I spell it "check".

Raiders Army · 03-20-2006, 02:17 PM

Are you saying I shouldn't have given out my PIN?????

heybrad · 03-20-2006, 02:19 PM

BOSCO

FrogMan · 03-20-2006, 02:20 PM

Quote:

Originally Posted by Raiders Army

Are you saying I shouldn't have given out my PIN?????

nope, just saying you gave it to the wrong people. Please PM it to me so I can tell them not to use it...

FM

heybrad · 03-20-2006, 02:20 PM

Timestamp makes that less funny.

Solecismic · 03-20-2006, 02:22 PM

It looks real because they borrow eBay's HTML. But no company instructs you to follow a link these days. They all tell you to go to their web sites and access your accounts the way you usually do.

SnDvls · 03-20-2006, 02:51 PM

I get these all the time too, but it's to an e-mail that e-bay and paypal don't have so I don't think twice about deleating them.

SirFozzie · 03-20-2006, 02:58 PM

Quote:

Originally Posted by heybrad

Timestamp makes that less funny.

Hey Brad?

FrogMan · 03-20-2006, 02:58 PM

Quote:

Originally Posted by SirFozzie

Hey Brad?

would have been better with "Brad Hey?"

FM

03-20-2006, 12:29 PM	#4
TheOhioStateUniversity High School Varsity Join Date: Nov 2004 Location: Columbus, GA via Columbus, OH	I had a similiar email to this from "Ebay" after I sold an item. The only thing that caught it was Mozilla Thunderbird when I attempted to click the link. __________________ Buckeyes Football/Basketball >>>> Your Favorite School

03-20-2006, 12:37 PM	#8
Cringer Grizzled Veteran Join Date: Oct 2000 Location: Edinburg,TX	I was getting a ton of these for a while. Has really slowed down for me the last month or so though. __________________ You Stole Fizzy Lifting drinks! You bumped into the ceiling which now has to be washed and steralized, so you get NOTHING! You lose!

03-20-2006, 01:34 PM	#15
Vince Pro Starter Join Date: Aug 2001 Location: Willow Glen, CA	Yeah, it probably would have been easy to spot. I was so flabbergasted at the request for my PIN, and the fact that I had followed the link even that far. __________________ Every time a Dodger scores a run, an angel has its wings ripped off by a demon, and is forced to tearfully beg the demon to cauterize the wounds.The demon will refuse, and the sobbing angel will lie in a puddle of angel blood and feathers for eternity, wondering why the Dodgers are allowed to score runs.That’s not me talking: that’s science. McCoveyChronicles.com.

03-20-2006, 12:29 PM	#3
KWhit Coordinator Join Date: Jan 2003 Location: Conyers GA	I've been getting those a lot lately.

03-20-2006, 12:40 PM	#9
miked College Starter Join Date: Jun 2001 Location: The Dirty	My brother got a bunch. You'd have to be pretty naive to think they'd need your PIN.

03-20-2006, 12:45 PM	#13
mooreadamc Mascot Join Date: Oct 2005 Location: Canada	Yup, i've had the same thing sent to me except from eBay. Looked very real and included the exact HTML format in the e-mail that eBay normally sends. It asked me to verify my accoutn details but when you look at the http address it doesn't match eBay.

03-20-2006, 01:39 PM	#16
Aardvark Mascot Join Date: Oct 2000	I keep getting email about my Barclays cheque card possibly not being secure. Of course, I don't have a Barclays card, and I spell it "check".

03-20-2006, 02:17 PM	#17
Raiders Army Coordinator Join Date: Oct 2000 Location: The Black Hole	Are you saying I shouldn't have given out my PIN?????

03-20-2006, 02:19 PM	#18
heybrad Norm!!! Join Date: Nov 2000 Location: Manassas, VA	BOSCO

03-20-2006, 02:20 PM	#20
heybrad Norm!!! Join Date: Nov 2000 Location: Manassas, VA	Timestamp makes that less funny.

03-20-2006, 02:22 PM	#21
Solecismic Solecismic Software Join Date: Oct 2000 Location: Canton, OH	It looks real because they borrow eBay's HTML. But no company instructs you to follow a link these days. They all tell you to go to their web sites and access your accounts the way you usually do.

03-20-2006, 02:51 PM	#22
SnDvls Pro Starter Join Date: Jul 2001	I get these all the time too, but it's to an e-mail that e-bay and paypal don't have so I don't think twice about deleating them.

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)