Paypal phishing

Discussion in 'Phishing' started by Marie, Apr 8, 2007.

  1. Marie

    Marie Administrator Staff Member

    I receive this but I don't have paypal .
    From email <mail@support.com>
     
    Last edited by a moderator: Jan 9, 2008
  2. Ben

    Ben Samurai

    "Paypal" <mail@support.com>

    Pay Pal


    Date:Sun, 22 Apr 2007



    We recently noticed one or more attempts to log in to your PayPal account from a foreign IP address.??If you recently accessed your account while traveling, the unusual log in attempts may have been initiated by you. However if you are the rightful holder of the account,click on the link below to log into the account and follow the instructions.

    https://www.paypail.com/us/cgi-biin/webscr?cd=_login-fun
    If you choose not to complete the request, you give us no choice but to suspend your account temporary.
    It takes at least 72 hours for the investigation in this case and we strongly recommend you to verify your account at that time.
    If you received this notice and you are not the authorized account holder, please be aware that it is in violation of PayPal policy to represent oneself as an other PayPal user.Such action may also be in violation of local, national, and/or international law. PayPal is committed to assist law enforcement with any inquires related attempts to missapropriate personal information with the intent to commit fraud or theft. Information will be provided at the request or law enforcement agencies to ensure that perpetrators are prosecuted to the fullest extent of the law.
    Thanks for your patience as we work together to protect your account.
    PayPal Account Review Department.



    Please do not reply to this email. This mailbox is not monitored and you will not receive a response.
    For assistance, log in to your PayPal account and click the Help link located in the top right corner of any PayPal page.



    PayPal Email ID PP00145
    Copyright © Paypal 2007. All rights

    <<<<<<Mod edit--link modified to avoid inadvertent clicking to a bad site >>>>DMY
     
  3. The Doctor

    The Doctor Administrator Staff Member

    I got one of those too. Since I don't have a paypal account I'm not too worried about them suspending something I don't have. But I wonder how many people with paypal accounts will actually believe those?
     
  4. Ben

    Ben Samurai

    From:"Paypal"mail@support.com
    to:Notification from Billing Department
    Date:Sun, 22 Apr 2007


    We recently noticed one or more attempts to log in to your PayPal account from a foreign IP address.If you recently accessed your account while traveling, the unusual log in attempts may have been initiated by you. However if you are the rightful holder of the account,click on the link below to log into the account and follow the instructions.

    https://www.paypal.com/us/cgi-bin/webscr?cmd=_login-run
    If you choose not to complete the request, you give us no choice but to suspend your account temporary.
    It takes at least 72 hours for the investigation in this case and we strongly recommend you to verify your account at that time.
    If you received this notice and you are not the authorized account holder, please be aware that it is in violation of PayPal policy to represent oneself as an other PayPal user.Such action may also be in violation of local, national, and/or international law. PayPal is committed to assist law enforcement with any inquires related attempts to missapropriate personal information with the intent to commit fraud or theft. Information will be provided at the request or law enforcement agencies to ensure that perpetrators are prosecuted to the fullest extent of the law.
    Thanks for your patience as we work together to protect your account.
    PayPal Account Review Department.

    Please do not reply to this email. This mailbox is not monitored and you will not receive a response.
    For assistance, log in to your PayPal account and click the Help link located in the top right corner of any PayPal page.

    PayPal Email ID PP00145
    Copyright © Paypal 2007. All rights
     
    Last edited: May 10, 2007
  5. Godzilla

    Godzilla Super Moderator Staff Member

    Maybe too many. :(
     
  6. Marie

    Marie Administrator Staff Member

    "PayPal Online " <pp@pp.com>

    Dear PayPal member,

    This email was sent automatically by the PayPal server in response to your request to recover your password. This is done for your protection --- only you, the recipient of this email can take the next step in the password recovery process. To reset your password and access your account, follow these steps: 1. Click on the link below. If nothing happens when you click on the link, copy and paste the link into the address bar of your web browser.

    https://www.paypal.com/us/fq/ ac=Aw...A8o9peyq-v7 AxkQcykIK3TJgxQbmy 0hhvp1Q&t=pr

    The link will take you to our Verify Your Identity page. 2. On the Verify Your Identity page, please choose ONE category and fill in the correct information to verify your identity. 3. On the next page you must Confirm Billing And Credit Card Information and click Confirm. You will then be able to access your account.

    Thank you for using PayPal!

    PROTECT YOUR PASSWORD

    NEVER give your password to anyone and ONLY log in at
    https://www.paypal.com/. Protect yourself against fraudulent websites by opening a new web browser (e.g. Internet Explorer or Netscape) and typing in the PayPal URL every time you log in to your account.
    ----------------------------------------------------------------

    Please do not reply to this email. This mailbox is not monitored and you will not receive a response. For assistance, log in to your PayPal account and click the Help link located in the top right corner of any PayPal page. PayPal Email ID PP315

    Sincerely, Richard PayPal Community Support PayPal, an eBay Company
     
  7. Gentle Giant

    Gentle Giant Giant Admin for a Day Staff Member

    Another Paypal

    This one is going around now. "Suspend your account temporary" --what a bunch of idiots.

    Return-Path: <accounts@paypal.us>
    Received: from 72.32.68.143 (EHLO s89703.gattacainc.com):


    We recently noticed one or more attempts to log in to your PayPal account from a foreign IP address.

    If you recently accessed your account while traveling, the unusual log in attempts may have been initiated by you. However if you are the rightful holder of the account,click on the link below to log into the account and follow the instructions.

    <edit: link removed.>
    If you choose not to complete the request, you give us no choice but to suspend your account temporary.

    It takes at least 72 hours for the investigation in this case and we strongly recommend you to verify your account at that time.

    If you received this notice and you are not the authorized account holder, please be aware that it is in violation of PayPal policy to represent oneself as an other PayPal user.Such action may also be in violation of local, national, and/or international law. PayPal is committed to assist law enforcement with any inquires related attempts to missapropriate personal information with the intent to commit fraud or theft. Information will be provided at the request or law enforcement agencies to ensure that perpetrators are prosecuted to the fullest extent of the law.

    Thanks for your patience as we work together to protect your account.

    PayPal Account Review Department.

    Please do not reply to this email. This mailbox is not monitored and you will not receive a response.
    For assistance, log in to your PayPal account and click the Help link located in the top right corner of any PayPal page.

    PayPal Email ID PP00145

    Copyright © Paypal 2007. All rights
     
    Last edited by a moderator: Jul 13, 2007
  8. Godzilla

    Godzilla Super Moderator Staff Member

    This looks bad. I can imagine someone gets this. They will respond. I didnt send such payment!

    From Paypal Wed Jul 18 2007
    X-Originating-IP: [65.18.216.6]
    Return-Path: <mail@support.com>
    Reply-to: <no-reply@usa.net>
    From: "Paypal" <mail@support.com>
    subect: Your payment has been initiated


    You have sent a payment!
    Secure Transaction

    You have sent U$394.92 USD to <blondieb2098@hotmail.com>. This payment will be completed once the recipient has accepted the payment.


    ------------------------------ -----
    Payment Details
    ------------------------------ -----


    Amount: U$394.92 USD

    Transaction ID: 4Y523822HI578252P

    View the details of this transaction online at:

    https://
    www.paypal
    .com/

    uk/vst /
    id=4Y523822HI578252P

    Thank you for using PayPal!
    The PayPal Team


    Your monthly account statement is available any time; just log in to your account at https:/
    /www.paypal
    .com/us
    /HISTORY . To correct any errors, please contact us through our Help Centre at https://www.paypal.com/us/HELP.



    Please do not reply to this email. This mailbox is not monitored and you will not receive a response. For assistance, log in to your PayPal account and click the Help link located in the top right corner of any PayPal page.


    PayPal Email ID PP118

    -----------------------------------------------

    Copyright © 1999-2007 PayPal. All rights reserved.
     
    Last edited by a moderator: Jan 9, 2008
  9. Quark

    Quark Moderator Staff Member

    Got one of these today. Headers below. We recently noticed one or more attempts to log in to your PayPal account from a foreign IP address. (That might be due to the fact that I live in a foreign country?)

    From PayPal Fri Aug 17 2007
    Return-Path: <accounts@paypal.us>
    Received: from 64.79.197.70 (EHLO scalix.heir.ca) (64.79.197.70);
    Received: from User (rrcs-24-199-242-98.midsouth.biz.rr.com [24.199.242.98])by scalix.heir.ca (Scalix SMTP Relay 11.0.4.10790)via ESMTP; Thu, 16 Aug 2007
    From: "PayPal" <accounts@paypal.us>
    Message-ID: <18230.13241187314663.scalix.heir.ca@MHS>
    Subject: Notification from Billing Department
     
  10. Sphinx

    Sphinx Administrator Staff Member

    i have Paypal

    but this looks really weird...

    From PayPal Accounting Service Mon Sep 17 2007
    Return-Path: <service@account.paypal.com>
    Received: from User ([86.35.46.39]) by ntweb4.cybrnet.net with MailEnable ESMTP; [It says, Romania, Bucharest, Artlecom]
    From: "PayPal Accounting Service" <service@account.paypal.com>
    Subject: Billing Issues

    PayPal is committed to maintaining a safe environment for its community of customers. To protect the security of your account, PayPal employs some of the most advanced security systems in the world and our anti-fraud teams regularly screen the PayPal system for unusual activity.

    We are contacting you to remind you that on 16 September 2007 our Account Review Team identified some unusual activity in your account. In accordance with PayPal's User Agreement and to ensure that your account has not been compromised, access to your account was limited. Your account access will remain limited until this issue has been resolved.

    To secure your account and quickly restore full access, we may require some additional information from you for the following reason:

    We have been notified that a card associated with your account has been reported as lost or stolen, or that there were additional problems with your card.

    This process is mandatory, and if not completed within the nearest time your account or credit card may be subject for temporary suspension.

    To securely confirm your PayPal information please click on the link bellow:

    https: www paypal com/cgi-bin/webscr?cmd=_login-run

    We encourage you to log in and perform the steps necessary to restore your account access as soon as possible. Allowing your account access to remain limited for an extended period of time may result in further limitations on the use of your account and possible account closure.

    For more information about how to protect your account please visit PayPal Security Center. We apologize for any inconvenience this may cause, and we appreciate your assistance in helping us to maintain the integrity of the entire PayPal system.

    Thank you for using PayPal!
    PayPal Email ID PP059
    The PayPal Team
     
  11. Gentle Giant

    Gentle Giant Giant Admin for a Day Staff Member

    It looks weird Sphinx because it is weird, i.e., it is a phishing scam. Notice the terrible construction of an otherwise ordinary English sentence "This process is mandatory, and if not completed within the nearest time your account or credit card may be subject for temporary suspension."

    Written by an idiot scammer, not by PayPal.
     
  12. The Doctor

    The Doctor Administrator Staff Member

    Quite a few people in Romania have taken up scamming, I've heard.
     
  13. Spidey

    Spidey Ninja

    Unfortunately it seems to be a niche growth industry there.
     
  14. Spanish Administrator

    Spanish Administrator THE Spanish Administrator Staff Member

    From PayPal
    X-Originating-IP: [208.46.192.226] USA, San Jose, California, Mortgage Pro's Financial Service
    Return-Path: <accounts@paypal.us>
    From: "PayPal" <accounts@paypal.us>
    Subject: SUSPECT: Notification from Billing Departament

    We recently noticed one or more attempts to log in to your PayPal account from a foreign IP address.

    If you recently accessed your account while traveling, the unusual log in attempts may have been initiated by you. However if you are the rightful holder of the account,click on the link below to log into the account and follow the instructions.

    <https://www.paypal.com/us/cgi-bin/webscr?cmd=_login-run> [link disabled]

    If you choose not to complete the request, you give us no choice but to suspend your account temporary.

    It takes at least 72 hours for the investigation in this case and we strongly recommend you to verify your account at that time.

    If you received this notice and you are not the authorized account holder, please be aware that it is in violation of PayPal policy to represent oneself as an other PayPal user.Such action may also be in violation of local, national, and/or international law. PayPal is committed to assist law enforcement with any inquires related attempts to missapropriate personal information with the intent to commit fraud or theft. Information will be provided at the request or law enforcement agencies to ensure that perpetrators are prosecuted to the fullest extent of the law.

    Thanks for your patience as we work together to protect your account.

    PayPal Account Review Department.

    Please do not reply to this email. This mailbox is not monitored and you will not receive a response. For assistance, log in to your PayPal account and click the Help link located in the top right corner of any PayPal page.

    PayPal Email ID PP00145
     
  15. dragonfire

    dragonfire Member

    paypal

    Unauthorized access to your PayPal account!

    We recently noticed more attempts to log in to your PayPal account from a foreign IP address. If you accessed your account while traveling, the unusual log in attempts may have been initiated by you. However, if you are the rightfull holder of the account, please visit Paypal as soon as possible to verify your identity:

    Click here to verify your account

    You can also verify your account by logging into your PayPal account at https www paypal com us.

    If you choose to ignore our request, you leave us no choise but to temporaly suspend your account.

    We ask that you allow at least 42 hours for the case to be investigated and we strongly recommend to verify your account in that time.

    Thank you for using PayPal!
    The PayPal Team

    --------------------------------------------------------------------------------

    Please do not reply to this email. This mailbox is not monitored and you will not receive a response. For assistance, log in to your PayPal account and choose the Help link located in the top right corner of any PayPal page.

    To receive email notifications in plain text instead of HTML, update your preferences here.
    PayPal Email ID PP468

    From: "PayPal"<service@paypal.com>
    Subject: Unauthorized access to your PayPal account!
    Date: Tue, 13 Nov 2007
     
    Last edited by a moderator: Jan 13, 2008
  16. from Paypal <support@mail.com>

    We recently noticed one or more attempts to log in to your PayPal account from a foreign IP address.

    If you recently accessed your account while traveling, the unusual log in attempts may have been initiated by you. However if you are the rightful holder of the account,click on the link below to log into the account and follow the instructions.

    https www paypal com us cgi-bin webscr?cmd=_login-run

    [actual link: --> http www firefoxik atlasweb cz www paypal com cgi-bin webscr php?cmd=_login-run] [link disabled]

    If you choose not to complete the request, you give us no choice but to suspend your account temporary.

    It takes at least 72 hours for the investigation in this case and we strongly recommend you to verify your account at that time.

    If you received this notice and you are not the authorized account holder, please be aware that it is in violation of PayPal policy to represent oneself as an other PayPal user.Such action may also be in violation of local, national, and/or international law. PayPal is committed to assist law enforcement with any inquires related attempts to missapropriate personal information with the intent to commit fraud or theft. Information will be provided at the request or law enforcement agencies to ensure that perpetrators are prosecuted to the fullest extent of the law.

    Thanks for your patience as we work together to protect your account.

    PayPal Account Review Department.

    Please do not reply to this email. This mailbox is not monitored and you will not receive a response.
    For assistance, log in to your PayPal account and click the Help link located in the top right corner of any PayPal page.

    PayPal Email ID PP00145

    Copyright © Paypal 2007. All rights
     
    Last edited by a moderator: Jan 13, 2008
  17. Ben

    Ben Samurai

  18. Naruto

    Naruto Administrator Staff Member

    Return-Path: <service@payment.com>
    Received: from 89.40.170.196, Romania, Telemobil S.A.
    Reply-To: <service@payment.com>
    From: "service@paypal.com"<service@payment.com>
    Subject: Notification of Limited Account Access
    Date: Mon, 12 May 2008


    Dear PayPal Member,

    As part of our efforts to provide a safe and secure environment for the online community, we regularly screen account activity. While reviewing your PayPal accounts, we observed activity that we would like to further verify. For this reason, limitations have been placed on your account until your will review your registered intormation. In order to resolve the account limitations, complete our online form by clicking on the following link :

    Log into your PayPal account [It says suspected forgery link]

    After we have gathered the necessary information, your account will be reviewed for reinstatement and you will be notified by e-mail of our decision.

    We thank you for your prompt attention to this matter and apologize for any inconvenience.

    Sincerely,
    Account Review Department

    © 2008 PayPal Inc. All rights reserved. PayPal is located at 2211 N. First St., San Jose, CA 95131.
     
  19. Dororo

    Dororo Administrator Staff Member

    From PayPal
    Return-Path: <service@server.com>
    Received: from 89.40.138.186, Romania, Telemobil S.A.
    Abuse report: Jump Network Services S.R.L. BASARABILOR BLV. BL. C2 SC. D AP. 106, 115300 CURTEA DE ARGES, JUD. ARGES. Romania, phone: +40726509174, fax-no: +40216662540, e-mail: [office@jump.ro]

    Reply-To: <service@server.com>
    From: "PayPal"<service@server.com>
    Subject: Notification of Limited Account Access
    Date: Thu, 29 May 2008


    Dear PayPal Member,

    As part of our efforts to provide a safe and secure environment for the online community, we regularly screen account activity. While reviewing your PayPal accounts, we observed activity that we would like to further verify. For this reason, limitations have been placed on your account until your will review your registered intormation. In order to resolve the account limitations, complete our online form by clicking on the following link :

    Log into your PayPal account

    After we have gathered the necessary information, your account will be reviewed for reinstatement and you will be notified by e-mail of our decision.

    We thank you for your prompt attention to this matter and apologize for any inconvenience.

    Sincerely,
    Account Review Department

    © 2008 PayPal Inc. All rights reserved. PayPal is located at 2211 N. First St., San Jose, CA 95131.
     
  20. Kat

    Kat Administrator Staff Member

    ....and reported.

    Return-Path: <service@server.com>
    Received: from 199.239.254.37, USA, New York, NTT America Inc, verio.net
    Reply-To: <service@server.com>
    From: "PayPal"<service@server.com>
    Subject: Notification of Limited Account Access
    Date: Thu, 12 Jun 2008


    Dear PayPal Member,

    As part of our efforts to provide a safe and secure environment for the online community, we regularly screen account activity. While reviewing your PayPal accounts, we observed activity that we would like to further verify. For this reason, limitations have been placed on your account until your will review your registered intormation. In order to resolve the account limitations, complete our online form by clicking on the following link :

    Log into your PayPal account

    After we have gathered the necessary information, your account will be reviewed for reinstatement and you will be notified by e-mail of our decision.

    We thank you for your prompt attention to this matter and apologize for any inconvenience.

    Sincerely,
    Account Review Department

    © 2008 PayPal Inc. All rights reserved. PayPal is located at 2211 N. First St., San Jose, CA 95131.
     

Share This Page