Paypal scam and gmail

MaxDepth

Diamond Member
Jun 12, 2001
8,757
43
91
I get this email titled, "PayPal Team identified some unusual activity in your account"
from a Service@Paypal.com <accounting@paypal.com>. It reads:


We recently have determined that different computers have logged into your PayPal account, and multiple password failures were present before the login. One of our Customer Service employees has already tryed to telephonically reach you. As our employee did not manage to reach you, this email has been sent to your notice.
Therefore your account has been temporarily suspended. We need you to confirm your identity in order to regain full privileges of your account.
If this is not completed by June 44444444444444444444444444444444444444444444, 2005, we reserve the right to terminate all privileges of your account indefinitly, as it may have been used for fraudulent purposes. We thank you for your cooperation in this manner.
To confirm your identity please follow the link below:

https://www.paypal.com/cgi-bin/webscr?cmd=_login-run

Thank you for your patience in this matter.

PayPal - Customer Service

Please do not reply to this e-mail as this is only a notification. Mail sent to this address cannot be answered.


However, I get a message above the email in bright red from Gmail:
"Warning: This message may not be from whom it claims to be. Beware of following any links in it or of providing the sender with any personal information. Learn more"


Nice touch. :thumbsup: Even though I knew it was a scam, I am sure there are others like our parents, grandparents, etc. who do not automatically mistrust everything they read on teh intarweb. And those poor folks keep the bastards in business.

Unfortunately, the evilness that resides in my brain has just now thought up a way of copying this whole email, including the gmail warning, and using the learn more link from gmail as the real phishing attack. So what looks like the a friendly warning from gmail about a phishing scheme is the actual phish attack.
:(
 

Sphexi

Diamond Member
Feb 22, 2005
7,280
0
0
I got one that claimed to be from Paypal, stating I had logged in from Spain, and they wanted me to verify my info at their website to make sure it wasn't someone trying to steal my account. Obviously, when I checked the source for t he email, the address that the link went to was some random server with a fake Paypal page on it. It's sad how desperate these people are, and even worse that people fall for it :(
 

spacejamz

Lifer
Mar 31, 2003
10,935
1,592
126

what would happen if these scammers actually sent emails that were gramatically correct with no mis-spelled words???

 

RelaxTheMind

Platinum Member
Oct 15, 2002
2,245
0
76
i go this same email on my yahoo account. except it didnt have a warning. if you click on the "masked" link it pops up a window that doesnt have an address bar.... effectively masking the URL. (it looks to be a college url too... h**p://larry.clsnp.edu.hk/~larry/uit/account_data_login_secure_encryption_SSL_server_user_login/index.htm)

The page looks identical to the paypal page. as well as all the links too.. signup, forgot password....etc...

very tricky and a wonder why they arent shut down yet...
 

cavemanmoron

Lifer
Mar 13, 2001
13,664
28
91
Originally posted by: RelaxTheMind
i go this same email on my yahoo account. except it didnt have a warning. if you click on the "masked" link it pops up a window that doesnt have an address bar.... effectively masking the URL. (it looks to be a college url too... h**p://larry.clsnp.edu.hk/~larry/uit/account_data_login_secure_encryption_SSL_server_user_login/index.htm)

The page looks identical to the paypal page. as well as all the links too.. signup, forgot password....etc...

very tricky and a wonder why they arent shut down yet...

:|
 

RossMAN

Grand Nagus
Feb 24, 2000
78,915
382
136
Originally posted by: RelaxTheMind
i go this same email on my yahoo account. except it didnt have a warning. if you click on the "masked" link it pops up a window that doesnt have an address bar.... effectively masking the URL. (it looks to be a college url too... h**p://larry.clsnp.edu.hk/~larry/uit/account_data_login_secure_encryption_SSL_server_user_login/index.htm)

The page looks identical to the paypal page. as well as all the links too.. signup, forgot password....etc...

very tricky and a wonder why they arent shut down yet...

Someone should report it to the officials at the school http://www.clsnp.edu.hk/