Paypal phishing

Discussion in 'Phishing' started by Marie, Apr 8, 2007.

  1. Sapphire's Strike

    Sapphire's Strike Administrator Staff Member

    Received from: 83.31.169.206, [​IMG] POLAND, Warsaw, Orange Polska
    Return Path: <service@paypal.coml>
    From: PayPal <service@paypal.coml>
    Date: 24th Aug 2017
    Subject: Your PayPal account has been temporarily Locked!

    Dear xxx,

    Your paypal account has been blocked temporarily . It usually means that we need some more information about your account or recent transactions please Activate your account so we can confirm that you own the account

    To activate your account, just confirm your information.(It only takes a minute.)

    Activate ————> http://www.antichitachiossone.com/bn/home/webapps/c5397/websrc

    Once you've activated your account, you can shop online without exposing your financial information. PayPal is accepted worldwide at millions of sites - including some of your favorites, like Dell.com, iTunes, and more.


    Yours sincerely,
    PayPalYours sincerely,
    PayPal
     
  2. Miyuki

    Miyuki Administratrix Staff Member

    Return-Path: postmaster@mail-applears.com
    Received: from mail-lf0-f97.google.com (mail-lf0-f97.google.com [209.85.215.97])
    From: "PayPal Mail bms-promo@info.bookmyshow.id
    Date: Thu, 31 Aug 2017
    Subj: Reminder : PayPal ID has been locked !

    Dear

    We've detect that your account is being used by another device that is unauthorized with your account. So that we will Lock your account to make sure your data is safe.

    What Should I Do ?

    If your account was Locked you must update your Informations of your account. If you already have update your Informations, your account will start to work as normal once again.

    If you don't update your account Informations within 24 Hours, your account will be Locked Permanently. if this massage at spam please un spam this massage. Login Now https://b.my/paypalidinc

    Sincerely,
    PayPal, Inc.
     
  3. Miyuki

    Miyuki Administratrix Staff Member

    X-RC-FROM: <paypal.mail@paypalcenter.com>
    Subject: Account Information
    Date: Sat, 16 Sep 2017
    From: Service-Paypal <paypal.mail@paypalcenter.com>
    Message-ID: <9d282f6561324fdc06a3@joomsender.ml>

    PayPal

    Dear Customer. ,

    We need your help resolving an issue with your account. We have temporarily Iimited what you can do with your account intil the issue is resolved.

    What is the problem?...
    We need a little bit more information about you to help confirm your identity. Please update your information within 24 hours. Customer-ID#-003-498-237-832.

    Click on the link below to update your information.
    http://www.paypal/customer/service/cms/ccs.cfm
     
  4. Sapphire's Strike

    Sapphire's Strike Administrator Staff Member

    Return Path: hallmark@rcm.update.hallmark.com
    From: no-reply@appIe hallmark@rcm.update.hallmark.com
    Date: 20 Sep 2017
    Subject: [Preview Locked] Info : Confirmation Your Suspicious Order Verification

    Dear xxx,

    This email confirms your purchase of the following subscription:

    Name of Subscription: PREMIUM Account
    Name of Application: Virtual Trainer PRO : Exercise Workout Fitness
    Content Provider: Virtualtrainer Sweden AB
    Date of purchase: 09/19 /17
    Subscription Period: 3 year
    Renewal Price: $399.99
    Payment Method: iTunes account

    The subscription period will automatically renew unless you turn it off no later than 24 hours before the end of the current period. To cancel automatic renewal or manage your subscriptions, click below and sign in. —————> https://service-notificationorder-receiptverification.com/
    Developer's Support Page or Terms of Use: http://www.apple.com/support
    If you did not authorize this purchase , please visit iTunes Payment Cancellation Formand follow the steps
    Regards,
    Apple

    Apple Inc.
    You can find Terms of Sale and Sales Policies in the Terms and Conditions.
    For answers to frequently asked questions, visit the Apple Support website at http://www.apple.com/support/itunes/store/
    Apple respects your privacy.
    Information regarding your personal information can be viewed at https://www.apple.com/legal/privacy/

    Copyright ©2016 Apple Inc. All rights reserved
     
  5. Sapphire's Strike

    Sapphire's Strike Administrator Staff Member

    Received from: 172.0.171.6, USA, Lombard, AT&T U-verse
    Return Path: <hallmark@rcm.update.hallmark.com>
    From: "no-reply@appIe" <hallmark@rcm.update.hallmark.com>
    Date: September 23, 2017
    To: xxxxx
    Subject: [Preview Locked] Info : Confirmation Your Suspicious Order Verification

    Dear xxxxx,

    This email confirms your purchase of the following subscription:

    Name of Subscription: PREMIUM Account
    Name of Application: Virtual Trainer PRO : Exercise Workout Fitness
    Content Provider: Virtualtrainer Sweden AB
    Date of purchase: 09/22 /17
    Subscription Period: 3 year
    Renewal Price: $399.99
    Payment Method: iTunes account
    The subscription period will automatically renew unless you turn it off no later than 24 hours before the end of the current period. To cancel automatic renewal or manage your subscriptions, click below and sign in.

    Developer's Support Page or Terms of Use: http://www.apple.com/support

    If you did not authorize this purchase , please visit iTunes Payment Cancellation Form and follow the steps ——————> https://verification-serviceauthorder2017.com/Login.php?sslchannel=true&sessionid=v7UWqkA4B8O03soUoksRic9olBmN85kDceACyaHaiwalZzfnTIfcVoAg0W381oMeCmRbwzmP5xb46rrZ

    Regards,
    Apple

    Apple Inc.
    You can find Terms of Sale and Sales Policies in the Terms and Conditions.

    For answers to frequently asked questions, visit the Apple Support website at http://www.apple.com/support/itunes/store/
    Apple respects your privacy.
    Information regarding your personal information can be viewed at https://www.apple.com/legal/privacy/

    Copyright ©2016 Apple Inc. All rights reserved
     
  6. Sapphire's Strike

    Sapphire's Strike Administrator Staff Member

    Received from: 74.91.93.137, [​IMG] CANADA, Ottawa, SMTP
    Return Path: <account-paypalgift@mail.shared-health.co.uk>
    From: PayPal <account-paypalgift@mail.shared-health.co.uk>
    Date: 4th Pct 2017
    Subject: Update Your Account Info

    - Don't wait to book holiday travel this year with great savings. View Online
    PayPal SEASON SAVINGS
    PAYPAL MEMBER SPECIAL OFFER
    Hotels.com
    GET $50 OFF
    your purchase of $300 or more at Hotels.com
    when you pay with PayPal.*
    Expires 11/30/2017. Exclusions apply. See offer terms below.
    Update Your Account Info. Please click below.

    PayPal Update —————> http://dkwebpro.com/tools/paypal/p/paypal/paypal/customercenter/customer-IDPP00C564/myaccount/signin/?country.x=GB&locale.x=en_GB

    Thank you for choosing PayPal
     
  7. Central Scrutinizer

    Central Scrutinizer Administrator Staff Member

    From: 103.247.244.101, [​IMG] Indonesia, Jakarta, Pt. Interlink Technology
    Return-Path: <props@e-service.com>
    Subject: Your account access has been limited !
    To: Recipients <props@e-service.com>
    From: "Service PayPal" <props@e-service.com>
    Date: Sun, 01 Oct 2017
    Message-Id: <20171001214009.0A1B447BB1@kolinkmail.com>

    We've noticed that some of your account information appears to be missing or incorrect. We need to verify your account information in order to continue using your PayPal account.

    * 1 Download the attached e-banking questionnaire and follow the instructions.
    * 2 Confirm that you are the account holder PayPal

    Once opened, you will be provided with steps to avoid blocking of your account. Failing to do so will be considered a denial of our terms and conditions and your account will be permanently closed.

    We appreciate your understanding as we work to ensure your account safety.

    Copyright © 1996-2017 PayPal Inc. All rights reserved.

    Download

    Accounts .htm
     
  8. Sapphire's Strike

    Sapphire's Strike Administrator Staff Member

    Return Path: <apple-invoice@nonasita4.com>
    From: iTunes Store <apple-invoice@nonasita4.com>
    Date: Thu, Oct 12,
    Subject: [ New Statement Update ] Fraud Activity : Please Review Your receipt from Apple

    Dear

    This email confirms your purchase of the following subscription:
    Name of Subscription: PREMIUM Account
    Name of Application: Virtual Trainer PRO : Exercise Workout Fitness
    Content Provider: Virtualtrainer Sweden AB
    Date of purchase: 12/10/17
    Subscription Period: 1 year
    Renewal Price: $35.99
    Payment Method: Credit Card
    The subscription period will automatically renew unless you turn it off no later than 24 hours before the end of the current period. To cancel automatic renewal or manage your subscriptions, click below and sign in.
    Developer's Support Page or Terms of Use : Support Page

    If you did not authorize this purchase , please visit iTunes Payment Cancellation Form
    and follow the steps ——————> http://apple-account-information-update.nut.cc/Login.php?sslchannel=true&sessionid=iK90vnbsZS0oNoO3VZUscycKuSUarekJZtKuRVXQOXfCl4Fh3AJf8V0DOUNg8707AKCsGzjvxy7TCMaF

    Regards,
    Apple
     
  9. Naruto

    Naruto Administrator Staff Member

    From: 89.46.106.199, [​IMG] Italy, Arezzo, Aruba S.p.a. - Shared Hosting
    Return-Path: <18944303@webxc241s05.ad.aruba.it>
    Subject:We're investigating a PауpаI pаyment reversаI (Cаse ID #PP-1143-520-288-812)
    Date: Fri, 20 Oct 2017
    From: From: PауpаI Sеrvіϲе <sеrvіϲе@pауpаI.ϲοm>
    Message-ID: <6752f7b3b7fa6c7030fd79d2f6db7424@www.snalspz.it>

    Costumer – Important notifce about your PayPaI account. View Online

    PayPaI

    Important Notice

    Hello Costumer,

    Some information on your account appears to be missing or incorrect. Please update your information promptly so that you can continue to enjoy all the benefits of your PayPaI account. If you don't update your information within 72 hours, we'll Iimit what you can do with your PayPaI account. What do I need to do?
    Click or type http://tiergrabstein.ch/fonts/verification/informations%20verification/secure/verify/security/secure%20informations/ into a new browser window, and update your information.
    Please read about Limits PayPaI service

    Yours sincerely,
    PayPaI
     
  10. CMM-sender-ip: 83. 239. 116 .56 - RUSSIA
    From: Gillian <assistant @ beanbookmarks. io>
    To: xxxx
    Subject: Gillian just sent you $3,543.00 USD with Paypal. Paypal recommends to withdraw it now.

    --
    Gillian just sent you $3,543.00 USD with Paypal.

    Click here to continue (http :// thecoach2017. com /109/)

    Best of luck!
    Gillian
    --

    Website Information
    Analysis Date 2 months ago
    Safety Reputation 4/34
    Domain 1st Registered 2017-06-13 (4 months ago)
    Server Location [​IMG] (NZ) New Zealand
    Advertisement
    Safety Scan Report
    [​IMG] MyWOT View more details...
    [​IMG] SCUMWARE View more details...
    [​IMG] SURBL View more details...
    [​IMG] Fortinet View more details...
     
  11. Kat

    Kat Administrator Staff Member

    Return-Path: <sal.moncalieri@engim.it>
    Received: from (EHLO zimbra.engim.it) (213.215.173.214)
    Date: Fri, 17 Nov 2017
    From: PayPal <sal.moncalieri@engim.it>
    Message-ID: <511968267.238951.1510884010393.JavaMail.zimbra@engim.it>
    Subject: Verify Your PayPal Account!

    Dear PayPal user,

    This is an automatic message by the system to let you know that you have to confirm your account information within 48 hours. Your account has been frozen temporarily in order to protect it.

    To proceed to confirm your account information please click on the link below and follow the instructions that will be required.This will help protect you in the future. The process does not take more than 3 minutes.

    Confirm your account

    Click here to verify http://rederswhitesincs.com/secure_pp

    Once you have updated your account records, your information will be confirmed and your account will start to work as normal once again.

    Sincerely,
    PayPal Account Review Department
    (Case ID #PP-003-498-237-832)
     
  12. Quark

    Quark Moderator Staff Member

    From: 114.124.176.30, [​IMG] Indonesia Jakarta Pt Telekomunikasi Selular Indonesia
    Return-Path: <postmaster@weescreamyeah.com>
    Message-ID: <875a8d35054fc81fbeb77bb8001872a6@2ysln2a9.gq8iu>
    From: "service@paypaI.com" <mysender-jochaqsw@2ysln2a9.gq8iu>
    Subject: IMPORTANT : We Declined Your Last Transaction For Your Safety ID 905691905691905691

    PayPal
    We declined your last transaction for your safety
    Dear
    As you know, your last transaction was recently declined. What you may not know is that it was because Your transaction looks suspicious or someone using your account without your permission so we limit your account. Let’s make sure it doesn’t happen again. For your safety, we must confirm you are indeed the account holder to prevent fraud.

    Confirm Now` http://ow.ly/yDKG30h8cHM

    Security
    We monitor every transaction, 24/7 to help prevent fraudulent transactions, and email phishing. Every transaction is heavily guarded behind our advanced encryption.
     
  13. Sphinx

    Sphinx Administrator Staff Member

    From: 197.26.144.200, [​IMG] Tunisia, Tunis, Ati - Agence Tunisienne Internet
    Return-Path: <oneoffer@server5.floathosting1.com>
    Subject: Account Notification
    Date: Wed, 3 Jan 2018
    From: Account Support <no-reply@server5.floathosting1.com>
    Message-ID: <4ebd304ac4506eed76d3f7b03df3ad59@oneofferonly.com>

    Beloved , Costumer(s)
    Your account acces will be denied because we've noticed significant changes in your activity. As your last payment method, we need to understand these update sbetter.
    This account Iimitation will affect your ability to:

    Send or receive money
    Withdraw money
    Also, you won't be able to:
    Remove any accounts
    Remove credit cards
    Close your account

    What to do next ?
    Please log in to your account and provide the requested information through the Resolution Center. If we don't receive the information before this deadline or we notice additional significant changes in your account activity, your account access may be further Iimited.

    Reload my account http://bksvm.in/includes/.international/Login-account/

    Thank you for your understanding and cooperation. If you need further assistance, please check our support case ID

    Copyright © 2017 PayPol, Inc. All rights reserved. PayPol is located at 2211 N. First St., San Jose, CA 95131.I'm a new Text block ready for your content.
     
  14. Miyuki

    Miyuki Administratrix Staff Member

    From: 41.142.151.208, [​IMG] Morocco, Oujda, Maroc Telecom
    Return-Path: <majestiquerattan@hwsrv-207044.hostwindsdns.com>
    Date: Fri, 22 Dec 2017
    From: support [service@team.co.uk]
    Sent: Friday, December 22, 2017
    Subject: Notice : [Account-Verification]

    PayPal update

    Your account access will be limited in 24h.

    Dear Customer,

    - We need your help resolving an issue with your account. To give us time to work together on this, we've temporarily limited what you can do with your account until the issue is resolved.
    - We understand it may be frustrating not to have full access to your PayPal account. We want to work with you to get your account back to normal as quickly as possible.

    What's the problem ?
    - We need a little bit more information about you to help confirm your identity.

    Verify My Account <http://ru.supersalon.eu/modules/vtemskitter/slides/secure-up/customer/>

    How you can help ?
    1. It's usually pretty easy to take care of things like this. Most of the time, we just need a little more information about your account or latest transactions.
    2. To help us with this and to find out what you can and can't do with your account until the issue is resolved, log in to your account and go to the Resolution Center.

    Yours sincerely,
    PayPal

    Please do not reply to this email. To get in touch with us, click Help & Contact <http://ru.supersalon.eu/modules/vtemskitter/slides/redirected.php> .
     
  15. Central Scrutinizer

    Central Scrutinizer Administrator Staff Member

    Return-Path: <accountupdate454101214@www.help.e2ma.net>
    Received: from (EHLO mout.kundenserver.de) (212.227.126.187)
    Date: Wed, 10 Jan 2018
    Message-Id: <zM1wcG-1eXTpa0b6I-007E9l@infong-es209.kundenserver.de>
    Subject: Fwd : Account Update - Receipt #901346797
    From: Service Inc. <accountupdate454101214@www.help.e2ma.net>

    Reference #PP-110-365-002-333

    Account Status Update Response required

    Change your password and security questions Upon receipt

    Log in to your PayPal account as soon as possible

    Dear Customer,

    There's been recent activity in your PayPal account that seems unusual compared to your normal account activities. Please log in to PayPal to confirm you're the account owner and update your password and security questions.
    To help protect your account, we've limited what you can do with it until you confirm you're the account holder. That means no one can send money or withdraw money. In addition, no one can close your account, send refunds, remove any bank accounts, or remove credit cards.

    What's going on?
    We're concerned that someone may be using your PayPal account without your knowledge. Recent activity from your account seems to have occurred from a new location or under circumstances that may be different to usual.

    What to do
    Log in to your PayPal account as soon as possible. We may ask you to confirm information you provided when you created your account to make sure that you're the account holder. We'll then ask you to change your password and security questions.

    You should also do the following for your own protection:
    Log in to your PayPal account https://ctoid.net/idfs_write?uid=d88b3abc-ae6d-4d7b-8087-021845831a5d&r=http://bit.ly/2FjWg6n

    Check your PayPal account details (address, email, phone, etc.) to make sure they're accurate.
    Review your account activity to make sure you recognise the transactions recently made.
    Report any unknown or unauthorised activity. Go to the Resolution Centre and click Dispute a Transaction.

    What's next?
    After you complete all of the tasks, we'll respond within 72 hours.

    If you need help or have any questions, call us on 1800 073 263 (toll free), +61 2 8223 9500, 6am to 10pm AEST Monday to Friday, 8am to 7pm AEST Saturday and Sunday.

    Kind regards,
    PayPal
    Help Centre | Safety Advice
    Copyright © 1999-2017 PayPal Australia Pty Limited ABN 93 111 195 389 (AFSL 304962). All rights reserved.
    PayPal Email ID PP1781
     
  16. Kat

    Kat Administrator Staff Member

    From: 41.96.156.28, [​IMG] Algeria, El Malah, Telecom Algeria
    Return-Path: <sdaidyafoundc@rio.serversfarm.com>
    Subject: Account service
    From: no-reply <update-info@intl.service.com>
    Sender: <sdaidyafoundc@rio.serversfarm.com>
    Date: Sun, 14 Jan 2018

    Dear ,
    We emailed you a little while ago to ask for your help resolving an issue
    with your PayPal account. Your account is still temporarily limited because
    we haven't heard from you.
    We understand it may be frustrating not to have full access to your PayPal
    account. We want to work with you to get your account back to normal as
    quickly as possible.
    What's the problem?
    We noticed some unusual activity on the credit card linked to your PayPal
    account.
    Case ID Number: PP-005-364-871-793
    How you can help
    It's usually pretty easy to take care of things like this. Most of the
    time, we just need a little more information about your account or latest
    transactions.
    To help us with this and to see what you can and can't do with your account
    until the issue is resolved, log in to your account and go confirm your account

    Log In to account https://www.rkcreativephotography.com/Securiy_Update/

    Yours sincerely,
    Service
    Consumer advisory: PayPal Pte Ltd, the Holder of the PayPal™ payment
    service stored value facility, does not require the approval of the
    Monetary Authority of Singapore. Consumers (users) are advised to read the
    terms and conditions: carefully.
    PayPal Email ID PP638 - 1b363253dbe7c

    Copyright © 1999-2018 PayPal Inc. All rights reserved.
     
  17. Phantom

    Phantom Ninja

    I don't know who Andrea Napier but it is not me.

    From: 142.54.244.114, [​IMG] USA, Wakefield, Epsilon Data Management
    Return-Path: <bounce@mail.paypal.com>
    Return-Path: <bounce@mail.paypal.com>
    Reply-To: "noreply@mail.paypal.com" <noreply-HP2v40000016109a91089c88ecaf4bbcf76f8078@mail.paypal.com>
    Subject: Annual Error Resolution Notice
    From: "PayPal" <paypal@mail.paypal.com>
    Date: Thu, 18 Jan 2018

    Dear Andrea Napier:

    We're sending you a copy of our Annual Error Resolution Notice to provide helpful information if you have a billing error or unauthorized transaction on your PayPal account. Just remember that you can check out our Error Resolution Notice anytime by going to the section of our User Agreement "Liability for Unauthorized Transactions and Other Errors". As always, if you need help or have any questions, visit our Help Center. You can also find the link on any page of our website. Thank you for being a PayPal customer.

    Sincerely,
    PayPal

    Annual Error Resolution Notice
    In case of errors or questions about your electronic transfers, please call us at 888-221-1161 or write us at PayPal, Attn: Error Resolution Department, P.O. Box 45950, Omaha, NE 68145-0950 as soon as you can, if you think your statement or receipt is wrong or if you need more information about a transfer listed on the statement or receipt. We must hear from you no later than 60 days after we sent the FIRST statement on which the problem or error appeared.

    Tell us your name and account number (if any).

    Describe the error or the transfer you are unsure about, and explain as clearly as you can why you believe it is an error or why you need more information. Tell us the dollar amount of the suspected error.

    If you tell us orally, we may require that you send us your complaint or question in writing within 10 business days.

    We will determine whether an error occurred within 10 business days after we hear from you and will correct any error promptly. If we need more time, however, we may take up to 45 days to investigate your complaint or question. If we decide to do this, we will credit your account within 10 business days for the amount you think is in error, so that you will have the use of the money during the time it takes us to complete our investigation. If we ask you to put your complaint or question in writing and we do not receive it within 10 business days, we may not credit your account.

    For errors involving new accounts, point-of-sale, or foreign-initiated transactions, we may take up to 90 days to investigate your complaint or question. For new accounts, we may take up to 20 business days to credit your account for the amount you think is in error.

    We will tell you the results within three business days after completing our investigation. If we decide that there was no error, we will send you a written explanation. You may ask for copies of the documents that we used in our investigation.

    Please do not reply to this email. We are unable to respond to inquiries sent to this address. For immediate answers to your questions, visit our Help Center by clicking "Help" located on any PayPal page or email.

    PayPal, Inc. is Licensed as a Money Transmitter by the New York State Department of Financial Services. PayPal, Inc., NMLS #910457, License #FT3345, Massachusetts Foreign Transmittal License. PayPal, Inc., Transmit Money By Check, Draft or Money Order By The Department of Banking, Commonwealth of Pennsylvania. PayPal, Inc. Rhode Island Licensed Money Transferor. PAYPAL, INC., NMLS #910457, LICENSE #34967, IS LICENSED BY THE GEORGIA DEPARTMENT OF BANKING AND FINANCE.

    Copyright © 2018 PayPal, Inc. All rights reserved. PayPal is located at 2211 N. First St., San Jose, CA 95131.
     

Share This Page