- Jul 29, 2001
- 27,703
- 12
- 81
I got the following email from "PayPal <users-info@paypal.com>"
Subject: PayPaI OfficiaI notice (the ls were written as Is like that) (edit: stupid forum font. the last l in paypal and official is a capital i)
The body of the email looks like text but is really an image. It says:
"Dear PayPal user,
PayPal isconstantly working to increase security for all of our users. To ensure the integrity of our payment network, we periodically review accounts.
Your account will be placed on restricted status. Restricted accounts continue to receive payments, but ar elimited in their ability to send or withdraw funds.
To lift this restriction, you need to complete our credit card verification process. At least one credit card in your account has been unconfirmed, meaning that you may no longer send money with this or any other card until you have completed the credit card confirmation process. To initiate the credit card confirmation, please follow this link and fill all necessary fields:
http://www.paypal.com/cgi-bin/webscr?cmd=_rav-form
Thank you,
The PayPal Account Review Department"
1. PayPaI and OfficiaI are misspelled in the title.
2. I can't copy/select text as the body is an image.
3. Mouse over on the image (anywhere in the email body really), shows that it is just a hyperlink to
http://www.paypal.com.cgi-bin.webscr.cmd=_rav-form@203.227.205.112:32/index.htm (notice the .com.cgi-bin.web dots instead of / marks)
Obviously I'm not gonna enter my credit card info, but I was curious to see where it went, so I clicked on the link and got a server not found error.
4. I changed the link in 3. to have / marks where the dots are after .com and got a link to a seemingly real paypal site, but there wasn't any form to fill out.
5. Further still, I went to paypal.com on my own in a new window and logged in. I viewed my account status and the url for that was www.paypal.com/row/cgi-bin/webscr?cmd=_account. I tried replacing _account with _rav-form and got a message from paypal saying my paypal was out of date and it was probably due to old bookmarks. I then tried removing the /row/ from the url to make it completely consistent with the url supplied by the email and got the same error.
Sounds like someone trying to pull off a scam.
I did a search, found nothing. What do you all think? Anyone else get this?
Subject: PayPaI OfficiaI notice (the ls were written as Is like that) (edit: stupid forum font. the last l in paypal and official is a capital i)
The body of the email looks like text but is really an image. It says:
"Dear PayPal user,
PayPal isconstantly working to increase security for all of our users. To ensure the integrity of our payment network, we periodically review accounts.
Your account will be placed on restricted status. Restricted accounts continue to receive payments, but ar elimited in their ability to send or withdraw funds.
To lift this restriction, you need to complete our credit card verification process. At least one credit card in your account has been unconfirmed, meaning that you may no longer send money with this or any other card until you have completed the credit card confirmation process. To initiate the credit card confirmation, please follow this link and fill all necessary fields:
http://www.paypal.com/cgi-bin/webscr?cmd=_rav-form
Thank you,
The PayPal Account Review Department"
1. PayPaI and OfficiaI are misspelled in the title.
2. I can't copy/select text as the body is an image.
3. Mouse over on the image (anywhere in the email body really), shows that it is just a hyperlink to
http://www.paypal.com.cgi-bin.webscr.cmd=_rav-form@203.227.205.112:32/index.htm (notice the .com.cgi-bin.web dots instead of / marks)
Obviously I'm not gonna enter my credit card info, but I was curious to see where it went, so I clicked on the link and got a server not found error.
4. I changed the link in 3. to have / marks where the dots are after .com and got a link to a seemingly real paypal site, but there wasn't any form to fill out.
5. Further still, I went to paypal.com on my own in a new window and logged in. I viewed my account status and the url for that was www.paypal.com/row/cgi-bin/webscr?cmd=_account. I tried replacing _account with _rav-form and got a message from paypal saying my paypal was out of date and it was probably due to old bookmarks. I then tried removing the /row/ from the url to make it completely consistent with the url supplied by the email and got the same error.
Sounds like someone trying to pull off a scam.
I did a search, found nothing. What do you all think? Anyone else get this?
Facebook
Twitter