Off topic: New scam?
Thread poster: Ivana de Sousa Santos

Ivana de Sousa Santos  Identity Verified
Portugal
Local time: 10:00
French to Portuguese
+ ...
Jun 18, 2005

Hello everybody:

I've just received an e-mail from "PayPal", from which I'm not a member, with the following content:


"Dear valued PayPal® member:

Due to concerns, for the safety and integrity of the paypal account we have issued this warning message.

It has come to our attention that your PayPal® account information needs to be
updated as part of our continuing commitment to protect your account and to
reduce the instance of fraud on our website. If you could please take 5-10 minutes out of your online experience and update your personal records you will not run into any future problems with the online service.

However, failure to update your records will result in account suspension.

Once you have updated your account records your paypal account
service will not be interrupted and will continue as normal.

To update your PayPal® records click on the following link:
http://www.paypal.com/cgi-bin/webscr_cmd=_login-run

Thank You.
PayPal® UPDATE TEAM

Accounts Management As outlined in our User Agreement, PayPal® will
periodically send you information about site changes and enhancements.

Visit our Privacy Policy and User Agreement if you have any questions.
http://www.paypal.com/cgi-bin/webscr?cmd=p/gen/ua/policy_privacy-outside"

It can only be a fake e-mail, since I'm not a member, so be careful.

Ivana


Direct link Reply with quote
 

Catherine Bolton  Identity Verified
Local time: 11:00
Member (2002)
Italian to English
+ ...
Definitely a scam Jun 18, 2005

I got the same sort of message about 6 months ago from ebay (yes, I admit that I love ebay!). I never did anything... and my account was never "suspended"! It's a ploy to divulge your bank/credit card details, so be wary!
Catherine


Direct link Reply with quote
 

JCEC  Identity Verified
Canada
Local time: 05:00
Member
English to French
Be careful ! Jun 18, 2005

The URL :

https://www.paypal.com/us/cgi-bin/webscr?cmd=_login-run

is actually extremely close to the one displayed when one logs into an existing PayPal account :

http://www.paypal.com/cgi-bin/webscr_cmd=_login-run

But when you look at the underlying HTML code, it is being rerouted to something like :

http://paypal.com.login-user8213.info/index.php

which is of course a totally different server !

John


Direct link Reply with quote
 
moya  Identity Verified
United Kingdom
Local time: 10:00
French to English
+ ...
It is indeed a scam, Jun 18, 2005

Dear Ivana,
I had the same mail a few weeks ago, I do have a paypal account, but not with this email address, so, I sent the email through to the Paypal Scam department, and they confirmed that this is indeed a scam. DO NOT CLICK ON THE LINK.
moya

Ivana de Sousa Santos wrote:

Hello everybody:

I've just received an e-mail from "PayPal", from which I'm not a member, with the following content:


"Dear valued PayPal® member:

Due to concerns, for the safety and integrity of the paypal account we have issued this warning message.

It has come to our attention that your PayPal® account information needs to be
updated as part of our continuing commitment to protect your account and to
reduce the instance of fraud on our website. If you could please take 5-10 minutes out of your online experience and update your personal records you will not run into any future problems with the online service.

However, failure to update your records will result in account suspension.

Once you have updated your account records your paypal account
service will not be interrupted and will continue as normal.

To update your PayPal® records click on the following link:
http://www.paypal.com/cgi-bin/webscr_cmd=_login-run

Thank You.
PayPal® UPDATE TEAM

Accounts Management As outlined in our User Agreement, PayPal® will
periodically send you information about site changes and enhancements.

Visit our Privacy Policy and User Agreement if you have any questions.
http://www.paypal.com/cgi-bin/webscr?cmd=p/gen/ua/policy_privacy-outside"

It can only be a fake e-mail, since I'm not a member, so be careful.

Ivana


Direct link Reply with quote
 

Robert Tucker
United Kingdom
Local time: 10:00
German to English
+ ...
Report to ISP Jun 18, 2005

I get about one a day of these either purporting to be from eBay or from PayPal.

Looking in the full email header or the address to which you are supposed to respond you generally find the web address or the IP address of the Internet service provider or the ultimate holder of the address.

With an IP address use:

http://www.schwarzl.com/ipcheck.html

to obtain the web address. From there you can usually find a useful contact email address.

Once reported, it is they who are likely to have their Internet connection suspended.

http://www.proz.com/post/233247#233247


Direct link Reply with quote
 
Lindsay Sabadosa  Identity Verified
United States
Local time: 05:00
Member (2004)
Italian to English
+ ...
Visit the PayPal site Jun 18, 2005

If you are using PayPal but suspect that an e-mail you receive from them is a scam, check out their website. I believe that they have information on there about how to identify an e-mail truly addressed from them. They are, in any case, aware of these phising attempts but there is probably little anyone can do.

Direct link Reply with quote
 

Astrid Elke Witte  Identity Verified
Germany
Local time: 11:00
Member (2002)
German to English
+ ...
You find out it is a scam when you are asked to type in your PIN number Jun 19, 2005

I got one of these a couple of months back, and believed it, so I started to fill in the online form until I got to the question asking me to type in my PIN number. Suddenly I realised that it was nothing official from PayPal, as no bank or similar organisation ever asks the customer for their PIN number, so I hastily went back through the form, carefully deleting everything that I had typed in.

Astrid


Direct link Reply with quote
 

Ivana de Sousa Santos  Identity Verified
Portugal
Local time: 10:00
French to Portuguese
+ ...
TOPIC STARTER
I got a new different e-mail again Jun 23, 2005

After having received an e-mail like the one I wrote about in this thread, I have just received a new one:

"We recently have determined that different computers have logged into your PayPal account, and multiple password failures were present before the login. One of our Customer Service employees has already tryed to telephonically reach you. As our employee did not manage to reach you, this email has been sent to your notice.
Therefore your account has been temporary suspended. We need you to confirm your identity in order to regain full privileges of your account.
If this is not completed by June 25, 2005, we reserve the right to terminate all privileges of your account indefinitly, as it may have been used for fraudulent purposes. We thank you for your cooperation in this manner.
To confirm your identity please follow the link below:

https://www.paypal.com/cgi-bin/webscr?cmd=_login-run

Thank you for your patience in this matter.

PayPal - Customer Service

Please do not reply to this e-mail as this is only a notification. Mail sent to this address cannot be answered."


Actually I couldn't see no IP address in this e-mail, so I can't report it.


Direct link Reply with quote
 

Robert Tucker
United Kingdom
Local time: 10:00
German to English
+ ...
Full header? Jun 23, 2005

Ivana de Sousa Santos wrote:

Actually I couldn't see no IP address in this e-mail, so I can't report it.


You've checked in the full header? -

Displaying Full Header (Sender) Information

Most SPAM has a forged "From" address. This means you will not be able to reply to it. Doing so will simply have it returned to your inbox as undeliverable. Viewing the full header information of a message shows the mail server relay path the mail has taken to reach your mailbox which helps in identifying e-mail problems or sources of SPAM.

Viewing Full Header Information for Individual Messages

1. In the Inbox Pane, click the message you want to view the headers for.
2. On the File menu, click Properties.
3. Click the Details tab.
4. Click OK after viewing the header information.

http://www.ksu.edu/InfoTech/e-mail/docs/outlook/olexpress/olexpress.html


On Thunderbird it's:

View>Headers>All


Ignore all IP addresses beginning with 10, 127, 172 or 192 (10.xxx.xxx.xxx, 127.xxx.xxx.xxx, 172.xxx.xxx.xxx, 192.xxx.xxx.xxx) - they're just local network addresses.


An email I got today from an ISP to whom I was trying to report a spammer:

Dear Sir or Madam,

In order to accurately track the origin of the email, we need the FULL HEADER and MESSAGE. If you need help please visit the following site http://www.haltabuse.org/help/headers/, this site will give you instructions on how to get headers from any email program.
Please keep in mind that we can only investigate Spam complaints that are no more than 3 days old.
Once you provide us with the full message and header we will then investigate this issue. Thanks in advance.

Regards



[Edited at 2005-07-03 15:27]


Direct link Reply with quote
 

Vito Smolej
Germany
Local time: 11:00
Member (2004)
English to Slovenian
+ ...
I in "paypal" - is it l or is it I? Jun 26, 2005


I'm not joking - could be somebody has now paypaI.com and tries to harvest off (Including the safe communication via https). But then it's rather improbable that paypal would let this happen without making NIC move and kill the name.

In any case either a scam - or the paypal defense team is in overdrive mode.


Direct link Reply with quote
 

Ivana de Sousa Santos  Identity Verified
Portugal
Local time: 10:00
French to Portuguese
+ ...
TOPIC STARTER
I think it's an I (ai) Jun 26, 2005

If you notice in the body of the e-mail, the "l" and "i" are very different.

Direct link Reply with quote
 


To report site rules violations or get help, contact a site moderator:

Moderator(s) of this forum
Fernanda Rocha[Call to this topic]

You can also contact site staff by submitting a support request »

New scam?

Advanced search






LSP.expert
You’re a freelance translator? LSP.expert helps you manage your daily translation jobs. It’s easy, fast and secure.

How about you start tracking translation jobs and sending invoices in minutes? You can also manage your clients and generate reports about your business activities. So you always keep a clear view on your planning, AND you get a free 30 day trial period!

More info »
Wordfast Pro
Translation Memory Software for Any Platform

Exclusive discount for ProZ.com users! Save over 13% when purchasing Wordfast Pro through ProZ.com. Wordfast is the world's #1 provider of platform-independent Translation Memory software. Consistently ranked the most user-friendly and highest value

More info »



Forums
  • All of ProZ.com
  • Term search
  • Jobs
  • Forums