TweetThanks for the heads up!

TweetFunny you should mention that, I got an email similar to that a couple days ago. My email said that there was suspicious activity or some **** and to click the link and put in my acct info including cc number. Like you said the site looks the same. A friend of mine had somethin along the same lines from e-bay. ya gotta pay attention to this stuff big time!

Tweetthey do the samething on e-bay. they send you a notice that your item was listed peviously, and they were the highest bidder and want their shyt. when you click on the link they provide, it takes you to "my ebay" log in page, and when you log in, it takes you no where, but they got your info! then they go into your account and start weaking havoc...they lower all the "buy it nows" to STUPID low amounts and when people hit the "buy it now" it invoices them for the down payment, witch goes to there account!!! slick fukers!!

TweetThis has been a growing problem effecting PayPal, EBay and, even some banks and credit unions. I make it a rule not to reply to any such emails, plus, I prefer not to use PayPal because of these deceptive emails...

IG

Tweeti got the same thing bro!!!!!! i just deleted it as i always do when i get stuff from paypal and ebay that dont look right!!!

Tweet

Originally Posted by wolfyEVH

where've you been bro? this scam has been popular for a few years

ive been with paypal now sense 03 and this is the first time i have ever seen this...

TweetThose are called "phishing" e-mails - so-called because they're sent out by scammers who "fish" for others' personal information so they can use it to commit fraud and identity theft. If you get one claiming to be from eBay or PayPal, forward it to "spoof@ebay.com" or "spoof@paypal.com" and they'll check it out.

My Yahoo mailbox gets those types of messages all the time from scammers posing as eBay, PayPal, Bank Of America, Chase, Citibank, National Credit Union Association, Fifth Third Bank - the list goes on. You can also forward suspect e-mails to "reportphishing@antiphishing.org".

You can spot a phishing e-mail just by moving your mouse pointer to the alleged "login" link without clicking on it and looking at the address that comes up at the bottom of your browser window. Many of those are disguised to look like legit links but take you to a totally phony site. Also, a legit e-mail from eBay or PayPal will not have a generic greeting - it will greet you with your actual name. If an e-mail from eBay or PayPal contains a generic greeting, most likely it's bogus.

TweetHAHAHA! You should have put in a fake bank account number. Then the phuckers would be *****ing when they figured out your the one that scammed them!

TweetHey for all of you paypal guys Do not EVER reply to an email from Paypal! They are all scams, Paypal will call you with any updates to your account, so delete those emails and if you ever question something on paypal just log into your account, NOT throught the link provided, and if there are any updates paypal will advise you of them. FYI

TweetGot another one today....

The original message - notice the misspelled domain (paypai.com) in the source e-mail address:

X-Apparently-To: x via 66.163.179.152; Tue, 04 Sep 2007 12:15:37 -0700
X-YahooFilteredBulk: 70.183.17.27
X-Originating-IP: [70.183.17.27]
Return-Path: <security@paypai.com>
Authentication-Results: mta314.mail.re4.yahoo.com from=paypaI.com; domainkeys=neutral (no sig)
Received: from 70.183.17.27 (EHLO SALT-DC01.saltlawcorp.local) (70.183.17.27) by mta314.mail.re4.yahoo.com with SMTP; Tue, 04 Sep 2007 12:15:36 -0700
Received: from User ([136.159.225.20]) by SALT-DC01.saltlawcorp.local with Microsoft SMTPSVC(6.0.3790.1830); Tue, 4 Sep 2007 12:12:56 -0700
Reply-to: <security@paypaI.com>
From: "security@paypaI.com" <security@paypaI.com> Add to Address BookAdd to Address Book Add Mobile Alert
Subject: Message Alert
Date: Tue, 4 Sep 2007 22:14:05 +0300
MIME-Version: 1.0
Content-Type: text/html; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Return-Path: security@paypaI.com
Message-ID: <SALT-DC01QeSOzNCWbz0000025d@SALT-DC01.saltlawcorp.local>
X-OriginalArrivalTime: 04 Sep 2007 19:12:57.0453 (UTC) FILETIME=[9A4821D0:01C7EF27]
Content-Length: 1091

You have 1 new Security Message Alert!


Resolution Center: Your account access has been limited.

Click here to remove the limitation


Thank you for using PayPal!

----------------------------------------------------------

Copyright © 1999-2007 PayPal. All rights reserved.

PayPal Email ID PP429


================================================== ==================================


The response from PayPal - within minutes of reporting it:

X-Apparently-To: x via 66.163.179.140; Tue, 04 Sep 2007 15:12:37 -0700
X-Originating-IP: [66.211.168.231]
Return-Path: <spoof@paypal.com>
Authentication-Results: mta262.mail.re4.yahoo.com from=paypal.com; domainkeys=pass (ok)
Received: from 66.211.168.231 (EHLO phx01imail01.phx.paypal.com) (66.211.168.231) by mta262.mail.re4.yahoo.com with SMTP; Tue, 04 Sep 2007 15:12:37 -0700
DomainKey-Signature: s=dkim; d=paypal.com; c=nofws; q=dns; b=mwjit+zWc/J65v3Ham1DsiOHNmN8VHzLBjLi1oSI+wk7ugvbpnjNsO6wiV+c XfIbg944o5032X1oYg1oaNaeoWPUkdyMEbhQkOd4hWYrbQYlt9 CR5/lEL4/XZTqwaCemYihgwSKagEGgyXaFgcK6csnzXAoX4E6eRFYIiQ6qn LM=;
Thread-Topic: Q510 - Thank you for your email to PayPal (KMM88144294V43822L0KM) :kf1
Content-Class: urn:content-classes:message
Received: from oma-kas-13.corp.ebay.com ([10.248.144.137]) by usa-entot-002.corp.ebay.com with Microsoft SMTPSVC(5.0.2195.6713); Tue, 4 Sep 2007 17:12:25 -0500
Date: Tue, 04 Sep 2007 17:11:16 -0500
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1896
To: "Larry" <x>
Subject: RE: Q510 - Thank you for your email to PayPal (KMM88144294V43822L0KM) :kf1
From: spoof@paypal.com View Contact Details View Contact Details Add Mobile Alert
Yahoo! DomainKeys has confirmed that this message was sent by paypal.com. Learn more
Reply-to: <spoof@paypal.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Mailer: KANA Response 7.0.1.142.12
Return-Path: <spoof@paypal.com>
Message-ID: <USA-ENTOT-002Dej3iW0003c09b@usa-entot-002.corp.ebay.com>
X-OriginalArrivalTime: 04 Sep 2007 22:12:25.0159 (UTC) FILETIME=[AC55AD70:01C7EF40]
Content-Length: 3443


Dear Larry,

Thanks for taking an active role by reporting suspicious-looking
emails.
The email you forwarded to us is a phishing email, and our security
team
is working to disable it.

-------------------------
What is a phishing email?
-------------------------
Phishing emails attempt to steal your identity and will often ask you
to
reveal your password or other personal or financial information. PayPal

will never ask for your password over the phone or in an email and will

always address you by your first and last name.

Take our Fight Phishing Challenge at
https://www.paypal.com/fightphishing to learn 5 things you should know
about phishing. You'll also see what we're doing to help fight fraud
every day.

-------------------------
You've made a difference.
-------------------------
Every email counts. By forwarding a suspicious-looking email to
spoof@paypal.com, you've helped keep yourself and others safe from
identity theft.

Thanks,

The PayPal Team
__________________________________________________ _____________________
This email is sent to you by the contracting entity to your User
Agreement, either PayPal Inc, PayPal Pte. Ltd or PayPal (Europe) S.à
r.l. & Cie, S.C.A. Société en Commandite par Actions, Registered
Office:
5th Floor 22-24 Boulevard Royal L-2449, Luxembourg RCS Luxembourg B 118

349.
__________________________________________________ _____________________

TweetFirst thing first is they always refer to you by first and last name in valid paypal emails. Secondly if it does refer to you by first and last name and says you have account issues, go directly to the site and avoid ever using any links provided in the email.

If it refers to you as "Dear paypal memeber" it's a scam!

Tweet

Originally Posted by DJDIGGLER

First thing first is they always refer to you by first and last name in valid paypal emails. Secondly if it does refer to you by first and last name and says you have account issues, go directly to the site and avoid ever using any links provided in the email.

If it refers to you as "Dear paypal memeber" it's a scam!

good advice there...never thaught about that!

Tweet

Originally Posted by DJDIGGLER

First thing first is they always refer to you by first and last name in valid paypal emails. Secondly if it does refer to you by first and last name and says you have account issues, go directly to the site and avoid ever using any links provided in the email.

If it refers to you as "Dear paypal memeber" it's a scam!

That is all correct - they actually say on their site that if there are issues, they'll tell you to log into your account MANUALLY and fix them. They don't send links in any of their customer service e-mails.

If you get one of those with a generic greeting, report it to PayPal by forwarding it to "spoof@paypal.com", as I did in my last post. You'll get a response within minutes.