Caution with PayPal e-mails.

[tech_support]

Just a heads up about this e-mail address: paypal [AT] review [DOT] com.

Is trying to steal your PayPal account by asking you to log on.

DO NOT log in to this. IT WILL STEAL ALL YOUR MONEY.

What is this world coming to...

[thetestingsite]

I had recieved this as well earlier this morning. It redirects to a phishing website. If you look at the email source code, you see the link is not what it says it is (in the email).

[tech_support]

Yep, It'll show you a warning in FireFox 2, but it won't show you a warning in IE6.

I'm going to report it to PayPal.

Can you give me the link? I've already deleted my e-mail.

[thetestingsite]

Same here. I was going to do that earlier, but clicked delete before I thought about reporting it. Then it was too late. Sorry.

Added Later: It appears they already know about it as it appears in an article on about.com. The link is below:

http://antivirus.about.com/od/emailscams/ss/phishing_7.htm

[tech_support]

Ok. I've reported the e-mail address, and I'll be contacted shortly.

[tech_support]

Ok. Reported.
(WOW that was fast :eek:)


Dear Peter Nguyen,

Thank you for taking the time to contact spoof@paypal.com. The email you
reported was not sent by PayPal and is a phishing (fraudulent) email.

-------------------
What to do Next
--------------------
Delete the phishing email. If you've already responded to the email,
please log in to your PayPal account and perform some important safety
measures.

1. Go to your Profile and change your password and security questions.

2. Review the payments listed on your Account Overview.

If you notice a payment that you don't recognize, visit the PayPal
Security Center to file a claim. We'll promptly investigate any
suspicious transactions and you won't be held liable for unauthorized
payments sent from your account.

-------------------------------------
Visit the PayPal Security Center
-------------------------------------
In the new PayPal Security Center you'll find fraud-fighting tips,
tools, and technology.

You'll learn:
* Ways to stay safe online
* How to spot fake emails
* What to do if you suspect unauthorized activity in your account

You'll also find tools to help protect against identity theft:
* Equifax credit alerts: Receive notifications about activity on your
credit accounts
* eBay Toolbar: Download a toolbar that warns you when youre on a
potentially fraudulent web site

-------------------------------------
Safeguard Your Account
-------------------------------------
Phishing emails often try to get your attention by telling you that
there's a problem with your account.

One way to figure out if an email is really from PayPal is to open a new
browser and log in to your PayPal account. Any important information
about your account will be displayed once you are logged in.

------------
Thank You
-------------
By alerting us to this phishing email, you're taking an active role in
keeping the PayPal community safe. Users like you are our greatest
partners in combating spoof.

We'll use the information you provided to work with law enforcement to
shut down the fraudulent website.


Sincerely,

PayPal


************************************************************************
Remember, PayPal will never ask you for your password in an e-mail.
There are no exceptions to this policy. If someone claiming to be from
PayPal asks you for your password in response to an e-mail, you should
refuse to provide it and contact us. To contact PayPal, go to the PayPal
Help Center and click the "Contact Us" link.



************************************************************************
This
email is sent to you by the contracting entity to your User Agreement,
either PayPal Inc or PayPal (Europe) Limited. PayPal (Europe) Limited is
authorized and regulated by the Financial Services Authority in the UK
as an electronic money institution.

***********************************************************************

[thetestingsite]

Thanks for posting the reply from paypal. I will work on this right now.

[Twey]

(WOW that was fast :eek:)I'd guess it's automated... they probably keep a database of the emails they've sent and check it against that.

[tech_support]

By fast, I meant 5 minutes, not 3 seconds :)

and it says it's not automated here:


This email is sent to you by the contracting entity to your User Agreement,
either PayPal Inc or PayPal (Europe) Limited. PayPal (Europe) Limited is
authorized and regulated by the Financial Services Authority in the UK
as an electronic money institution.

[Twey]

It doesn't. In fact, it very carefully avoids saying "person" and instead says "entity," a word with a broad scope that definitely includes computers :)
By fast, I meant 5 minutes, not 3 seconds :)Mail server lag.

[tech_support]

Aha. Very clever.

[jscheuer1]

The cucumber sandwiches entity were delicious. Thank you. These fraud emails from folks trying to phish out free money from unsuspecting Pay Pal account holders have been around for awhile. I see them them a lot. I'm sure it said something about this in the automated response but, if you ever get anything from anyone you have an account with that asks you to click here and do this and that, don't do it. Go to the web site of the service or business itself by entering their known address into the browser. Login and take care of whatever it is or call them at their number listed on their web site. Never go to the link in the email.

[mburt]

Yep, got the same message... it's obviously spam though (if you were an idiot, it may appear legit :p).

[boxxertrumps]

what tipped me off for it being spam was I dont have a paypal account.

Why do we all get the same spam?

[thetestingsite]

Why do we all get the same spam?

That's a good question. This morning, I recieved 3 (count them... 1, 2, 3...) emails from the same supposed sender (Bank of America). What tipped me off that this was SPAM was the fact that I have never (and never will) use(d) Bank of America for anything. I traced the IP address of the link that they sent along for me to click on and it appeared to be forged.

Has anyone else encountered the Bank of America spam one yet?

[tech_support]

Yep, got the same message... it's obviously spam though (if you were an idiot, it may appear legit :p).
I actually thought the foreign IP was my school's IP... :)

Then I clicked the link and got the "phishing website" link. And I saw the URL...