• Welcome to Overclockers Forums! Join us to reply in threads, receive reduced ads, and to customize your site experience!

Paypal account jack scam?

Overclockers is supported by our readers. When you click a link to make a purchase, we may earn a commission. Learn More.

attack

Member
Joined
May 23, 2002
My buddy recieved this email:

From: PayPal Services
To: *I deleted this*
Sent: Saturday, September 24, 2005 7:24 AM
Subject: Your Account Will Be Suspended !


Military Grade Encryption is Only the Start.

At PayPal, we want to increase your security and comfort level with every transaction. From our Buyer and Seller Protection Policies to our Verification and Reputation systems, we'll help to keep you safe.

---------------------------------------------------------------------------------------------------------

We have recently noticed one or more attempts to log into your PayPal account from a foreign IP address and we have reasons to believe that your account may have been hijacked by a third party without your authorization.

If you recently accessed your account while traveling, the unusual login in attempts may have been initiated by you. However, if you are the rightful holder of the account, click on the link below to log into your account within the above-mentioned period.

https://www.paypal.com/cgi-bin/webscr?cmd=_login-run

If you choose to ignore our request, you leave us no choice but to temporaly suspend your account.

We ask that you allow at least 72 hours for the case to be investigated and we strongly recommend to verify your account in that time.

If you received this notice and you are not the authorized account holder, please be aware that it is in violation of PayPal policy to represent oneself as another PayPal user. Such action may also be in violation of local, national, and/or international law. PayPal is committed to assist law enforcement with any inquires related to attempts to misappropriate personal information with the intent to commit fraud or theft. Information will be provided at the request of law enforcement agencies to ensure that perpetrators are prosecuted to the fullest extent of the law.

Thanks for your patience and understanding as we work together to protect your account.

Sincerely,

PayPal Account Review Department

PayPal, an eBay Company


The link is shown as:
https://www.paypal.com/cgi-bin/webscr?cmd=_login-run

But really points to:
http://www.paypal-info.us/us/cgi-bin/websrc.cmd=_login-run

The first one is encrypted, the second has no encryption...and I started to go through the second link with a bogus email and password (not too friendly)....and then it comes to soem user agreement stuff and I just quit trying.

What's everyones thoughts?
 
Looks bogus to me, I'd stay away from it. Doesn't paypal have a customer service number you can verify this with in the event it happens?
 
Old scam, new twist. Many threads about these type of emails. Contact PP about it, they'll likely get it shutdown so the scammer can move on to the next;)
 
Well I did some quick tracing and it appears that the server may be in Czechoslovakia. Far from an exhaustive test but since when did scammers deserve a whole 10 minutes of my time?
 
I recieved a similiar e-mail and its a scam, dont click the links and login, if you do the con men will have your Paypal passwords.

All you should do is forward the e-mail to [email protected] and then delete the message and move on.
 
It eventually will take you to a page that asks for paypal info, bank and credit card info, email address info, and even your social security number and stuff like mothers maiden name. Hell, they even wanted the routing number for the bank info and the verification number for credit cards. It basically asks for your entire life. I tried to enter all fake info but got prompted with an invalid credit card popup and didn't feel like figuring out the correct amount of numbers for an account.
 
If there a fake CC number generator somewhere that can be used to fill up those phisers with dummy info? I've tried random number mashing and that didn't work.
 
Back