Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Re: PayPal fraud

3 views
Skip to first unread message

Geoff Duncan

unread,
Jul 26, 2005, 3:37:11 PM7/26/05
to
Pt <can.n...@reached.com> wrote:
> For the past few months on a random basis I have been getting email
> from PayPal.

These messages have not been from PayPal; they're "phishing" scams from
crooks hoping to prey on recipients' gullibility. Most of them are prety
obvious if you read the text or (better) examine the underlying HTML. In
a few cases, email programs will even alert you that these messages
(and/or the links they contain) are probably fraudulent.

gd

--
Geoff Duncan http://www.quibble.com/geoff/
(The email address above is invalid; see Web page to contact privately)

oasysco

unread,
Jul 26, 2005, 6:10:32 PM7/26/05
to
Pat,

I gave up my PP account, heck, over a year now. I, too, get spoof emails
and just saw that as another warning that PP accounts are a huge target. I
figured that if PP is that much of a public target, they are very much a
private target by outside hackers *and* more likely, insiders who are
responsible for most computer crime.

While PP is convenient and there will be many folk who say they've nevr had
a problem with it, it's only a matter of time before an insider compromises
PP. My guess is that it has already happened on a *limited basis* but has
not been publicized.

After that fiasco with that NET-based MasterCard company (NET something or
another) thta was shut down by the Gov't several years back for fraud
perpetrated by insiders against account holders, I asked myself if I wanted
to chance going back through that again. One scam they ran is that you'd
send a payment in and your account wouldn't be credited. It happened to me
3 times over the two years I had the CC, each time taking weeks to resolve
- only to be told at the end of each time that my payment had been credited
to another account. I later found out that they did this scam was one rason
they were shut down.

For the record, I never had a problem with lost funds with PP or PP
seizing/freezing my account. I just didn't want access to my bank account
to be so open when I used PP so little. At my bank, I can't have separate
accounts under my name, so I couldn't create a dummy one that held nothing.

Greg

Pt <can.n...@reached.com> wrote in
news:2v1de1lhmu68nr0j0...@4ax.com:

> For the past few months on a random basis I have been getting email
> from PayPal.

> One says my account has been breached.
> Another asks for my password.
> Another says I need to update my account and this just came today.
>
>
> You have added dech...@yahoo.com as a new email address for
> your PayPal account.
>
> I did not add anything!
>
> If you did not authorize this change or if you need assistance
> with your account, please contact PayPal customer service at:
>
>
> https://www.paypal.com/us/wf/f=ap_email
>
>
> Thank you for using PayPal!
> The PayPal Team
>
> When I accessed the site it said that they needed all my account
> numbers and that it was a random check.
> I get one sort or another of these emails often.
> I have contacted both Ebay and PayPal about it with no replies.
> For safety reasons I updated to nonexistant account numbers.
> I will no longer use PayPal.
>
> Pt
>

Joey Goldstein

unread,
Jul 26, 2005, 3:22:03 PM7/26/05
to
It's called "phishing" and I can almost guaranty that the email you
received was not from PayPal.

The address in the url you posted:
<https://www.paypal.com/us/wf/f=ap_email>
was probably not where clicking on that url in your email client
actually took you.
The text of the link looked like that in your email client but the
address that was encoded in the html link went to another site, a bogus
site, a malevolent site. Always look at the address bar in your browser.

If you gave them any valid financial information about yourself, or used
your PayPal PIN number at their site, then you are probably all set for
some form of identity theft.

It's not PayPal's fault either.
The emails that they do send you tell you to never respond to the type
of email you just responded to.

Here's what PayPal did send you:

<Begin Quote>

What's in this email?


<#protect>Protecting Your Account
<#password>Forget Your Password? We can help!
<#ebay>PayPal and eBay Anything Points

Protecting Your Account

Many users have recently reported receiving emails that appear to
be from PayPal, eBay, or other popular websites that ask the user to
enter their password or other private information either directly in the
email or by clicking a link. These "spoof" emails are designed to
capture private information from unsuspecting users, and are not sent by PayPal.

Stay safe; don't respond to emails asking for any of the following:


Your password and email address combination

Credit card numbers

Bank account numbers

Social security numbers

First and Last Names

Other online safety tips:

Always log in to the PayPal site
PayPal will only ask for information AFTER you have securely logged in.

Keep your password safe
Use a unique password for your PayPal account, and don't use it on any
other site or for any other service.

Read your email carefully
PayPal will always address you by your first and last name or business
name when we send you an email

Report Suspicious emails
Help us keep the community safe for everyone. If you receive a
suspicious email, please report it to us at
<mailto:sp...@paypal.com>sp...@paypal.com.
Forget your password? We can help!

If you forget your password, don't worry. Just click on the
"Forget your password?" link on the PayPal homepage, and you'll be able
to reset your password after you confirm ownership of your account by
answering a few questions that only the true account owner would know.

For more information,
<http://www.paypal.com/cgi-bin/webscr?cmd=_help-ext&eloc=10&loc=1&unique_id=03952&source_page=_home&flow=>click here.

<End Quote>

When I forward phishing emails i get to a bonifide PayPal address they
always reply.
<sp...@paypal.com>
Usually it's just a form letter but they do reply.


Pt wrote:
>
> For the past few months on a random basis I have been getting email
> from PayPal.
> One says my account has been breached.
> Another asks for my password.
> Another says I need to update my account and this just came today.
>
> You have added dech...@yahoo.com as a new email address for
> your PayPal account.
>
> I did not add anything!
>
> If you did not authorize this change or if you need assistance
> with your account, please contact PayPal customer service at:
>
> https://www.paypal.com/us/wf/f=ap_email
>
> Thank you for using PayPal!
> The PayPal Team
>
> When I accessed the site it said that they needed all my account
> numbers and that it was a random check.
> I get one sort or another of these emails often.
> I have contacted both Ebay and PayPal about it with no replies.
> For safety reasons I updated to nonexistant account numbers.
> I will no longer use PayPal.
>
> Pt

--
Joey Goldstein
http://www.joeygoldstein.com
joegold AT sympatico DOT ca

Pt

unread,
Jul 26, 2005, 3:04:45 PM7/26/05
to

dirk

unread,
Jul 26, 2005, 4:20:12 PM7/26/05
to
paypal never asks for passwords in emails,if you think you gave away
paypal account information to other (phishing) parties , its best to change your
password and/or inform paypal of this and check for activities you didnt do.

"Pt" <can.n...@reached.com> schreef in bericht
news:2v1de1lhmu68nr0j0...@4ax.com...

Max Leggett

unread,
Jul 26, 2005, 3:52:03 PM7/26/05
to
On Tue, 26 Jul 2005 19:42:21 GMT, Pat Smith <pj...@pacbell.net> wrote:

>never never click a link on those things
>They are fake, and ebay always says they will never ask you for numbers

I used to forward them with the headers to sp...@paypal.com, but I got
bored doing it, so now I just delete them. PayPal always say they'll
never ask you for information; they're entirely above board.


--------------------------------------------------------------
"If the gods wanted us to twist our spines about
while we played guitar, they would have given us
rubber bands rather than vertebrae. And then where
would humanity be? Propelling cornflakes box
submarines in some alien bathtub in an ungodly
time dimension where the music of the spheres
consisted of Kenny G."
Spinoza
--------------------------------------------------------------

Pat Smith

unread,
Jul 26, 2005, 3:42:21 PM7/26/05
to

Max Leggett

unread,
Jul 26, 2005, 7:37:13 PM7/26/05
to
On 26 Jul 2005 16:33:22 -0700, "LarryV" <lar...@rcn.com> wrote:

>There's loads of other sites as well that detail these scams. Don't
>ever visit any link that you receive via email asking you for account
>information, credit card numbers and so forth. No valid company would
>ask for this information via an email message.

For that matter, never click on a link in your email. Possibly a viral
exe. Copy the address and paste it, instead.

LarryV

unread,
Jul 26, 2005, 7:33:22 PM7/26/05
to
Yup, like everyone said, these are all fraudulent messages designed to
steal your credit card information. Whenever you get a message
purportedly from Ebay or Paypal asking to verify your account
information, or alleging fraudulent use and so forth, immediately
delete it, don't even bother reading it. Your anger with Paypal is
misplaced, they have absolutely nothing to do with it. If you want more
information about how it works, visit the following url

http://antivirus.about.com/cs/emailscams/a/blebayscam5.htm

jdah...@uiuc.edu

unread,
Jul 26, 2005, 10:52:43 PM7/26/05
to
I get a lot of those emails and have never had a paypal account.

Robert

unread,
Jul 27, 2005, 12:26:12 AM7/27/05
to
Best way to provide the fraudulus information to sp...@paypal.com
is to copy the entire source of your incoming e-mailinto the mail you are
sending to sp...@paypal.com
as it seems that when you forward a mail to someone, it replaces the header
which holds all the information as to who exactly sent this to you, with
your own address. So
-> Right click on the incoming mail
-> Properties
-> Details
-> Source of message
-> Select all, copy & paste into your mail to sp...@paypal.com

Robert

Jon Fox

unread,
Jul 27, 2005, 12:59:34 AM7/27/05
to
jdah...@uiuc.edu wrote:
> I get a lot of those emails and have never had a paypal account.

ditto that.

Jon


--

www.jonfoxjazz.com

oasysco

unread,
Jul 27, 2005, 7:20:23 AM7/27/05
to
"jdah...@uiuc.edu" <jdah...@uiuc.edu> wrote in
news:1122432763.2...@o13g2000cwo.googlegroups.com:

> I get a lot of those emails and have never had a paypal account.
>

I am getting a number of them for eBAY now.

Greg

thom_j.

unread,
Jul 27, 2005, 9:33:16 AM7/27/05
to
fwiw:
my zone alarm suite grabs all fraudulent & spoof emails
that are suppose to be from PayPal, eBay or any other
"phish" type email but I have learned awhile ago (years)
"do Not respond Nor reply."
If you want to do anything, just report it directly on the
eBay - PayPal site.. Besides this neither will never ask
for personal information, as it is already in their coded
database.. cheers curious tee'..
.


Reno De Stefano

unread,
Jul 27, 2005, 9:58:14 AM7/27/05
to
Hi Pt,

I have been getting similar fraudulent e-mails. You should pay no attention
to them. If it was a real e-mail, Paypal would have used your registered
business name in its heading «Dear.........». Paypal does mention on its
web site, what a fraudulent e-mail may look like, or sound like. You should
make no changes at all if you have no problems entering your account. I hope
this helps!!

Reno De Stefano
Jazz Guitarist/professor
University of Montreal


"Pt" <can.n...@reached.com> a écrit dans le message de news:
2v1de1lhmu68nr0j0...@4ax.com...

RickH

unread,
Jul 27, 2005, 10:47:12 AM7/27/05
to
I've gotten emails saying that someone in Romaia has tried to access my
PayPal account and that I need to go to a link to reset my password, an
obvious scam. I closed my PayPal account when this happened. The last
three times I used Ebay I just open the PayPal account, do my
transaction, then immediately close my PayPal account after the money
clears.

These PayPal accounts were secured by my credit card, in the future I
will open a small bank account somewhere, and keep just enough money in
it to cover Ebay usage and base the PayPal account on a bank account
instead of a credit card. This way any loss is limited to the amount
of money I choose to keep in the bank account. Basing your PayPal
account on a credit card, and having that card number on PayPals
database is just asking for trouble, IMO.

glen

unread,
Jul 27, 2005, 11:22:18 AM7/27/05
to
Thanks for this guys. As a self-confessed 'puter duh I wasn't sure
what to do when I started to get shed loads of these mails. I
suspected I was being Phished but I don't use Pay pal or Ebay. They've
been sitting in my junk folder making me wonder if I haven't done
something wrong at some stage. Clicked something somewhere that
handed my life on a silver salver to the pirates.

Anyway, they're gone now , along with another small source of niggling
insecurity.

The stuff you come across on this group............

thanks again.

This group needs more IT and less GB
8-]
glen

_ya_wanna@mail.com jeffbonny

unread,
Jul 27, 2005, 2:31:16 PM7/27/05
to
Something to keep in mind discussing this is that people DO try to
mess with paypal and ebay accounts and paypal and ebay WILL send you
legitimate requests to change your password that should not be
ignored. The procedure for this will never be to follow a link from an
email and you need to sign into you account to do it. With ebay if the
email is legit it will also show up as an alert on your "my ebay"
page.

jeffbonny
van.bc.ca

Message has been deleted
0 new messages