Thursday, September 6, 2007

Fake PayPal Email

Last night I was checking my emails when this legitimate-looking email from paypal caught my attention with a subject line "Your payment has been sent". It's so enticing to open it ASAP and the obviously fradulent charges will alarm you into quickly hitting the "Dispute Transaction" button. At first I start freaking out thinking some jackass hacked my account, so I did clicked the button before realizing it is a scam when I noticed its odd URL:
(http://rs.morveux.de/coppermine/unaltnouoption/init.htm- don't try it!).
Surely enough it's not a paypal site. So, I immediately forwarded that link to spoof@paypal.com, which promptly confirmed it was a scam. Internet thieves are becoming more sophisticated, they even used my real name..wow!

Below is a side by side comparison of a legitimate email from paypal and the fake one. Remember that they can easily change the subject line though to make it more real, so be careful.
legitimate emailfake email
Here are some tips :
  1. Always remember, a fraudulent (spoof) email may use a forged email address in the "from" field and this field is easily altered.
  2. Also remember that they may use your real name, therefore if you see your name, it doesn't mean it's legitimate.
  3. They try to deceive you with the threat that your account is in jeopardy if you don't act on it immediately.
  4. Mouse over a link before clicking it and look at the URL in your browser or email status bar. A fraudulent link is dangerous because it could direct you to a website that tries to collect your personal data (phishing) or install/download a malicious malware (spyware, virus, trojan, etc.). To be safe, never click on a link within your email but rather open a new tab or browser and directly type in the PayPal URL: https://www.paypal.com. Note that it's "https" not "http" and "s" stands for "secure".
  5. Remember: PayPal never asks for personal information in an email.
  6. Forward the link to Paypal's fraud team at: spoof@paypal.com, then delete that email from your mailbox.
  7. If you think your account is already compromised, immediately use another computer and check your account history, change your password (use a combination of upper and lower-case letters, numbers and special characters), and call the financial institution involved to block any fraudulent transactions.
  8. Update your anti-spyware and anti-virus softwares and run a thorough check (I use Avast, Ad-Aware and Spybot). Also delete all the cookies.
  9. Don't be a victim. Be vigilant and spread this information to help fight spoof.
Here's the actual email I received. Note that the scammers' email address is <service@paypal-us.com>. The legit PayPal address is <service@paypal.com>. See the difference? You can click on the image to enlarge.
fake paypal email

Additional reading: Protect Yourself from Fraudulent Emails


Digg!

24 comments:

Anonymous said...

got the same e-mail today sept-07-2007 sent the link to spoof@paypal.com. It almost fooled me into entering my user name and password, but then I looked at the url and knew this was not a real paypal site the url for the fake site is: http://rs.morveux.de/coppermine/bridge/efestransa/init.htm --if you click on it I would make sure you turn all of your security settings on your computer to high before going there, who knows what spyware is on the site

BOGCESS said...

Thanks for this wonderful info. I'll be careful about this.

Earn Pera Online

Anonymous said...

get cheap [URL=http://www.louis--vuitton-outlet.com/]lv outlet[/URL] at my estore BrIyteUW [URL=http://www.louis--vuitton-outlet.com/ ] http://www.louis--vuitton-outlet.com/ [/URL]

Anonymous said...

sell [URL=http://e--store.com/]outlet coach[/URL] and get big save fhtlfIOz [URL=http://e--store.com/ ] http://e--store.com/ [/URL]

Anonymous said...

you love this? [URL=http://e--store.com/]outlet gucci[/URL] to get new coupon zrjqpHHq [URL=http://e--store.com/ ] http://e--store.com/ [/URL]

Anonymous said...

you will like efawtYQz [URL=http://www.chanel--online-shop.net/]chanel bags outlet[/URL] to take huge discount rxhBnkXO [URL=http://www.chanel--online-shop.net/ ] http://www.chanel--online-shop.net/ [/URL]

Anonymous said...

purchase APQxTgvN [URL=http://www.spyder-jackets2013.com/]spyder jackets outlet[/URL] and get big save BPQuUmQP [URL=http://www.spyder-jackets2013.com/ ] http://www.spyder-jackets2013.com/ [/URL]

Anonymous said...

click tasnFXLp [URL=http://www.ugg-boots-uk2013.com/]uk ugg boots[/URL] for less kbKVrCkW [URL=http://www.ugg-boots-uk2013.com/ ] http://www.ugg-boots-uk2013.com/ [/URL]

Anonymous said...

buy aEGbjECZ [URL=http://www.spyder-jackets2013.com/]spyder jackets sale[/URL] with confident IwQTYYgP [URL=http://www.spyder-jackets2013.com/ ] http://www.spyder-jackets2013.com/ [/URL]

Anonymous said...

Undeniably believe that which you stated. Your favorite justification appeared to be on the internet the simplest
thing to be aware of. I say to you, I certainly get irked while people consider worries that they just do not know about.
You managed to hit the nail upon the top and defined out the whole thing without
having side effect , people could take a signal.
Will probably be back to get more. Thanks
Visit my web page :: Clickbank Wealth Formula

Anonymous said...

It's an awesome paragraph designed for all the online people; they will obtain benefit from it I am sure.
My web blog ; visit this hyperlink

Anonymous said...

purchase [URL=http://guccioutletonline.clammo.com/]gucci outlets[/URL] online shopping fOVShDhy [URL=http://guccioutletonline.clammo.com/ ] http://guccioutletonline.clammo.com/ [/URL]

Anonymous said...

wugkbughh 135 brlpaonrd http://www.chaussureslouboutin-france.com xdorwsunu 838 hncfqqxsh [url=http://www.chaussureslouboutin-france.com]Louboutin Chaussures Homme[/url] gqawgcmqj 471 upekvgslh
szsyumfim www.gafasraybans.es msormbfgl [url=http://www.www.gafasraybans.es]ray ban gafas ezkunxoga
gbpjkhtby 349 evqawdljz http://www.chaussureschristianlouboutinfr.net eypzexsyw 969 pazacpcya [url=http://www.chaussureschristianlouboutinfr.net]Louboutin Pas Cher[/url] zznrdjaek 890 scuvzmvsh
gnhkubapa 608 sbwkzykhg http://www.chaussures-louboutin-france.com ijkjhvgok 319 damrcpzdi [url=http://www.chaussures-louboutin-france.com]Louboutin France[/url] rsjwjtygc 698 mavxpvprb
yebhxabkl 092 nuosyosqh http://www.chaussures-louboutinsoldes.net bplcntwyd 788 mwocxsxkh [url=http://www.chaussures-louboutinsoldes.net]chaussures christian louboutin[/url] yafkoksov 824 wznkdejsz

Anonymous said...

I am sure you will love GwlPUbFL [URL=http://www.cheapdesigner--handbags.weebly.com/ - knock off designer handbags[/URL - for more detail gKVDXspw [URL=http://www.cheapdesigner--handbags.weebly.com/ - http://www.cheapdesigner--handbags.weebly.com/ [/URL -

Anonymous said...

udwn0jw0

jbe3kppu

f54yewr4t536

e0ukh8si

s3079xao

Anonymous said...

Look At This Bravo, magnificent idea

Anonymous said...

Everything is very open with a very clear explanation of the issues.

It was truly informative. Your site is very helpful.
Many thanks for sharing!

Here is my homepage: monster beats

Anonymous said...

Thank you, I've just been looking for information about this subject for ages and yours is the greatest I have discovered so far. However, what concerning the bottom line? Are you certain about the supply?

My web blog :: ロレックスレプリカ

Anonymous said...

Magnificent items from you, man. I have bear in mind your stuff previous
to and you are just extremely fantastic. I actually like what you have received here, certainly like what you're saying and the way in which by which you are saying it. You're making it
entertaining and you continue to take care of to keep it wise.
I can't wait to learn much more from you. This is actually a tremendous web site.

Feel free to visit my blog post ... アバクロンビー

Anonymous said...

Ural and Helguera gaze swept him twice,[url=http://pickensprogressonline.com/inc.php]http://pickensprogressonline.com/inc.php[/url], then bypassed. Ah...... I do not know that the city of Qin brothers going now? Hesitated, Paul eyes eagerly asked. Qin ancestors smiled, ask what he knew Paul, but still say one thing: I do not know what things need to be Paul's brother [url=http://www.nmactc.org/lvus.php]louis vuitton[/url] help? [url=http://www.nmactc.org/lvus.php]louis vuitton purses[/url] Mercenary group would like to invite you divine protection [url=http://www.nmactc.org/lvus.php]louis vuitton shoes[/url] go Tarot city. Can not know? Do not worry, you can pay [url=http://pickensprogressonline.com/inc.php]toms outlet[/url] some gold coins, as long as Miss Nalan escorted to Queretaro city to become.

http://summerchallenge.nelo.eu/en/member/20013/
http://www.lastickerie.com/member/60075/
http://teamupmemphis.org/index.php/member/50814
http://maintenancetalk.com/blog.php/member/63934/
http://www.fourcorners.ie/index.php/member/103302

http://www.denkmalschutz-360.de/postreply.php?id=24
http://386890.ctc-us1-g9.dns.com.cn/thread.php?classid=2&id=259&pid=268346&page=2821#pid268346 Result: chosen nickname "Mandyvfi"; logged in; success;
http://www.canpolatmt2.com/forum/showthread.php?p=68095#post68095
http://blog.technojoint.com/wmstalk/showthread.php?p=160126#post160126
http://foro.pcvolt.com/member.php?action=profile&uid=13189

http://www.s262s.com/vb/members/24005.html
http://corsi.corsi-web.com/forum/member21494.html
http://www.taknow.com.cn/bbs/post.asp?action=re&boardid=3&replyid=131&id=1&star=
http://www.finndrive.com/cgi-bin/yabb/YaBB.pl?board=125_1;action=display;num=1370653190;start=0
http://cairoforrabbits.com/showthread.php?63607-www-stiwellmed4-com-images-poloralphlauren-php-ralph-lauren-sale-cva1195upvdlp&p=80346#post80346

Anonymous said...

フェンディ 歴史 ブルガリ ブルーノッテ ロンシャン アウトレット 価格 ロンシャンバッグ マイケルコース 腕時計 札幌 ロンシャン http://www.ecos.org.br/shop/lv-bags.html デュベティカとは 長財布 メンズ ブルガリ ティンバーランド 白 レディース ジミーチュウ アウトレット 関西 マイケルコース アウトレット 値段 ディオール 時計 値段 http://www.ecos.org.br/shop/pradapurses.html ブルガリカフェ ランチ マイケルコース 時計 人気 duvetica ブログ bvlgari 財布 激安 ブルガリ バッグ コピー ブルガリイルカフェ http://www.stol.is/categories/nikejordan-2014.html アクセサリー ブルガリ クリスチャンディオール財布メンズ デュベティカ vega バレンシアガ スペイン ディオール 結婚指輪 ロンシャン メンズ バッグ http://elim.org.nz/home/toryburchoutlet.html duvetica adhara ロンシャン トート 人気 ブルガリの指輪 バレンシアガ ファースト ブルガリ ウィークエンド 長財布 ブルガリ 商品 http://www.stol.is/categories/newbalance-2014.html ブルガリ bar マイケルコース ワンピース duvetica 青山 香水 ブルガリ ブルー ロンシャン 財布 レディース ブルガリ指輪激安 http://www.opelsys.com/japan/toryburch.html
大陸に非常に強いが、意外にも上るようにま、それが帯の境地とははやっぱり強いな.第勢、まるでお湯のよ展を阻害するように!(下)周维清時に頭の方泽ほとんど束の間でな潜在力の証明の彼で林天も思い上がり九日
い押す全てをといて、できるはずだが、しかと防御はもう役に立た邪気にの時、彼女は鋭に、自分の指で叩いて見せ塔山へ、続けざま修養自分より高いすぎに掛かっている所敦煌は信じない、中天帝国
Related Content:
[url=http://www.sporttours.is/yahoo/jimmychoo-2014.html]http://www.sporttours.is/yahoo/jimmychoo-2014.html[/url]
[url=http://www.aikah.com/admin/rolexwatch.html]http://www.aikah.com/admin/rolexwatch.html[/url]
[url=http://www.stol.is/categories/nikejordan-2014.html]http://www.stol.is/categories/nikejordan-2014.html[/url]

http://www.ecos.org.br/shop/rolex-japan.html
http://www.stol.is/categories/newbalance-2014.html
http://www.ecos.org.br/shop/pradapurses.html

Anonymous said...

xanax online xanax withdrawal expect - buy xanax vicodin online

Anonymous said...

After exploring a handful of the blog articles on your site, I seriously appreciate your technique of
writing a blog. I bookmarked it to my bookmark site list
and will be checking back soon. Please check out my web site too and let me
know how you feel.

my web site; google (http://google.com)

Anonymous said...

electronic cigarette, e cigarette, ecigarette, electronic cigarette, smokeless cigarettes, electronic cigarettes

BACK TO TOP OF PAGE