Tina C Posted June 14, 2007 Share Posted June 14, 2007 I received this message yesterday (twice). Paypal has confirmed that it is a spoof email. Just wanted to let you all know in case you get something allegedly from Accounts@paypal.us - it would have been so easy to panic and click on the link but I stopped myself. Apologies if this has been posted before. Subject: Notification from Billing Department We recently noticed one or more attempts to log in to your PayPal account from a foreign IP address. If you recently accessed your account while traveling, the unusual log in attempts may have been initiated by you. However if you are the rightful holder of the account,click on the link below to log into the account and follow the instructions. (link deleted) If you choose not to complete the request, you give us no choice but to suspend your account temporary. It takes at least 72 hours for the investigation in this case and we strongly recommend you to verify your account at that time. If you received this notice and you are not the authorized account holder, please be aware that it is in violation of PayPal policy to represent oneself as an other PayPal user.Such action may also be in violation of local, national, and/or international law. PayPal is committed to assist law enforcement with any inquires related attempts to missapropriate personal information with the intent to commit fraud or theft. Information will be provided at the request or law enforcement agencies to ensure that perpetrators are prosecuted to the fullest extent of the law. Thanks for your patience as we work together to protect your account. PayPal Account Review Department. -------------------------------------------------------------------------------- Please do not reply to this email. This mailbox is not monitored and you will not receive a response. For assistance, log in to your PayPal account and click the Help link located in the top right corner of any PayPal page. -------------------------------------------------------------------------------- PayPal Email ID PP00145 Copyright © Paypal 2007. All rights Quote Link to comment Share on other sites More sharing options...
Lesley Posted June 14, 2007 Share Posted June 14, 2007 Thanks for alerting us Tina - a very good spoof Quote Link to comment Share on other sites More sharing options...
Egluntyne Posted June 14, 2007 Share Posted June 14, 2007 These criminals just get cleverer and cleverer don't they....its frightening. Thanks for the warning. Quote Link to comment Share on other sites More sharing options...
Popcorn Posted June 14, 2007 Share Posted June 14, 2007 (edited) oh no - now you've got me thinking. I've had at least two of these in my inbox recently and I've been so preoccupied I can't remember what I did about it. I've only used paypal a couple of times for my Ebay purchases.....I better go and have a looksee. Not that I have the foggiest of what I'm looking for I have no idea how to use the thing or even how to access my account Edited June 14, 2007 by Guest Quote Link to comment Share on other sites More sharing options...
Popcorn Posted June 14, 2007 Share Posted June 14, 2007 This is the email...does it look suspicious? I didn't do anything with it. Dear Gina, We would like to announce important developments affecting all PayPal accounts in the European Union (the "EU"). No action is required on your part, and you will be able to continue using PayPal with no changes. Currently, PayPal (Europe) Ltd. is the service provider for PayPal in the EU. PayPal (Europe) Ltd. is a UK company regulated and authorised by the Financial Services Authority (FSA) in the UK as an electronic money institution. This authorisation enables PayPal to provide its service throughout the EU. From 2 July 2007, a new PayPal company, PayPal (Europe) S.à r.l. & Cie, S.C.A. (PayPal Luxembourg), will become the service provider for PayPal in the EU. This is a Luxembourg entity regulated as a bank by the Commission de Surveillance du Secteur Financier (CSSF), the Luxembourg equivalent of the FSA. PayPal Luxembourg will provide the PayPal service throughout the EU. Your customer relationship with PayPal On 2 July 2007, your customer relationship will be automatically transferred from PayPal (Europe) Ltd. to PayPal Luxembourg. This includes your customer relationship as governed by the terms of the PayPal User Agreement and, for applicable UK merchants, the PayPal Website Payments Pro Agreement (collectively, the "Agreements"). To summarise, from 2 July 2007, PayPal (Europe) Ltd. will assign to PayPal Luxembourg all its right, title, interest and benefit in and to the Agreements. New User Agreement and Privacy Policy As of 2 July 2007, PayPal Luxembourg will have a revised User Agreement and Privacy Policy. The revised User Agreement will help users more easily understand PayPal's terms and conditions and will incorporate many of the policies currently accessed by hyperlinks. Under the Privacy Policy, PayPal Luxembourg will be the data controller of your personal information as of 2 July 2007 and will provide more details about the third parties to whom PayPal Luxembourg will disclose your personal and account information. For more information about the transition to PayPal (Europe) S.à r.l. & Cie, S.C.A., click here. If you do not wish to continue your relationship with PayPal, you may close your account at any time by logging in to your account, clicking Profile, and following the instructions from the "Close Account" link. You should make sure you first withdraw the outstanding PayPal balance to your bank account. Sincerely, PayPal (Europe) Ltd. Quote Link to comment Share on other sites More sharing options...
Tina C Posted June 14, 2007 Author Share Posted June 14, 2007 Gina - I got that one too. I think that one is genuine. For info here is the message I received about the spoof one. Thank you for contacting PayPal in regard to an email you received. Mrs. ***, upon review of your account, we can confirm that you have received a spoof email. We can assure you that you account is not suspend or there is no attempt marked by our security system that your account has been accessed from different place. If you have not already done so, please forward the email to spoof@paypal.com in order for us to investigate the source. As a precaution we would suggest that you change your password and security questions as follows: Log in to your account at https://www.paypal.com by entering your email address and password in the Member Login box. Click the 'Profile' tab. Select either 'Password' in the Account Information column. Click 'Edit' You may be asked to confirm ownership of the account by answering questions based on your account information Click 'Submit' Enter your current password in the 'Current Password' box Password: Enter and re-enter your new password Security Questions: Select two new security questions and enter the answers Click 'Save' If you've replied to the email with financial details, we recommend that you contact your bank and/or credit card company immediately. For future reference we have listed some security tips below to help you stay protected online: Never give your password to anyone, even to PayPal employees. When using the PayPal service, always ensure that the URL address listed at the top of the browser is https://www.paypal.co.uk/.'>https://www.paypal.co.uk/. The 's' ensures that the website is secure. Even if the URL contains the word 'PayPal', it may not be a PayPal webpage. Don't click on a link in an email which seems suspicious to you. Always log in directly at https://www.paypal.co.uk/. Look for the 'lock' symbol that appears in the lower right hand corner of the browser. This symbol indicates that it is a secure site. If you would like to see more information on spoof emails and additional security tips, please visit our Security Centre. There's a link to the Security Centre at the bottom of every PayPal webpage. Please let me know if you need further assistance. Quote Link to comment Share on other sites More sharing options...
sparkleeeeee Posted June 14, 2007 Share Posted June 14, 2007 hi gina i think that e-mail is legit as you dont have to do anything with it and it does say something about it on paypal as well. i have had a couple the same as this. i think the scam ones ask you to click on a link and log in. they link is to a fake paypal page and when you log in they have your details. i always access paypal through my e-bay account so i know i am not on a scam page. Quote Link to comment Share on other sites More sharing options...
Charlottechicken Posted June 14, 2007 Share Posted June 14, 2007 I have had the one that Gina has received, and as far as I am aware it is real. Paypal always use your name, whereas a spammer will not (necessarily!). If you are not sure of the origin of an email, do not reply or click on any links in the email itself. Quote Link to comment Share on other sites More sharing options...
chrisnrob Posted June 14, 2007 Share Posted June 14, 2007 If you're ever in any doubt as to the authenticity of en email from Paypal, you can forward it to spoof@paypal.com and they will reply and let you know whether or not it's genuine. Paypal will never ask for the following personal information in an email: * Credit and debit card numbers * Bank account numbers * Driving licence numbers * Email addresses * Passwords * Your full name More tips at https://www.paypal.com/uk/cgi-bin/webscr?cmd=xpt/cps/securitycenter/general/UnderstandPhishing-outside Rob Quote Link to comment Share on other sites More sharing options...
chrisnrob Posted June 14, 2007 Share Posted June 14, 2007 Well said Dan. When I check my email I'm always amazed at the number of accounts I've apparently got with different financial institutions, all wanting me to log-on and update my details! Rob Quote Link to comment Share on other sites More sharing options...
Couperman Posted June 14, 2007 Share Posted June 14, 2007 Tina C, I may have mis-understood here, but Paypal would almost certainly take the time to get the English and the gramma right (i don't have time). I think that the e-mail you posted was not from Paypal but a reply from the spammers. If you meant to post it as a warning I would remove the links they are probably spoofed too. I have had a drink so it may read differently in the morning Quote Link to comment Share on other sites More sharing options...
Gallina Posted June 15, 2007 Share Posted June 15, 2007 (edited) The PayPal message posted by Popcorn is a genuine one: I had it too. Any message not asking for your password is likely to be genuine; any message asking for your password is definitely NOT genuine. If ever you are not sure, just click Reply and see what address comes up. The cheats don't use the correct eBay or PayPal addresses, and you can see immediately if the reply is destined for Russia or wherever. (But for goodness' sake don't click on Send.) There are some very plausible spoof emails allegedly coming from eBay too: they are looking much more professional. Again, go through the motions of replying in order to check. Whatever you do don't have the same eBay and PayPal password. And make them vicious: I had a six-letter eBay password and it was cracked. I only discovered this when I saw that I was selling hundreds of mobile phones. Passwords should be about nine characters, with a mixture of numbers and letters, and the odd upper-case symbol. A computer can whiz through all possible combinations of six letters in no time. The most vulnerable people are those with a lot of good feedback (their good name allows criminals to rip other people off) and beginners, who are likely to log in because they don't know any better. Edited June 15, 2007 by Guest Quote Link to comment Share on other sites More sharing options...
Egluntyne Posted June 15, 2007 Share Posted June 15, 2007 Good tip about pass words Gallina. Thanks. Quote Link to comment Share on other sites More sharing options...
Cinnamon Posted June 15, 2007 Share Posted June 15, 2007 A good rule of thumb is that if an emil is addressed to "Paypal user" or similar,it may be a spoof. Paypal & Ebay tend to send theirs to your username or real name. I ALWAYS delete any that do not call me by my name. Gina - yours is 100% genuine Quote Link to comment Share on other sites More sharing options...
Gallina Posted June 15, 2007 Share Posted June 15, 2007 There are some very plausible spoofs now entitled "Question from eBay member". If you are currently selling something, it would be quite easy to be taken in. The trouble is that you get used to being prompted for your eBay password unexpectedly: for example if you decide to "Watch" an item. It can become an automatic reaction. The best thing is always to be suspicious. I forward all criminal emails to spoof@ebay.co.uk because I think it is important that they know the scale of the problem (and it makes me feel better). I don't think that eBay and PayPal are doing enough to prevent fraud. Quote Link to comment Share on other sites More sharing options...
Cinnamon Posted June 15, 2007 Share Posted June 15, 2007 Yes, I have had the Question from Ebay memeber ones too, but they are quite easy to identify as you are not selling the item they are asking about Paypal need to step up their game, but Ebay have their own messaging service, so any emails they send will go into your In Box on your "My Ebay" page. I simply delete/ignore all emails that come into my email address In Box ( via Outlook) & take all my emails fro my "My Ebay" page. Quote Link to comment Share on other sites More sharing options...
Tina C Posted June 15, 2007 Author Share Posted June 15, 2007 Couperman - I contacted Paypal via the (real) website and the reply I posted is genuine. Quote Link to comment Share on other sites More sharing options...
Charlottechicken Posted June 15, 2007 Share Posted June 15, 2007 There are some very plausible spoofs now entitled "Question from eBay member". If you are currently selling something, it would be quite easy to be taken in. I received several of those, when I wasn't selling anything I have an email address just for ebay and paypal, yet all the spoof emails come in on the email I first registered with them, therefore the spoofs are easy to spot at the moment. I will have to be on my toes for when they catch up with my new email Quote Link to comment Share on other sites More sharing options...
Guest Posted June 15, 2007 Share Posted June 15, 2007 I've had the odd email, supposedly from ebay, asking me to pay for an item - the usual 'follow this link and log into your paypal acoount' job -I always report them, but I can't believe that people would actually for for one of these emails. Quote Link to comment Share on other sites More sharing options...
Jules. Posted June 15, 2007 Share Posted June 15, 2007 oh dear! Ill tell my dad! Quote Link to comment Share on other sites More sharing options...
chrisnrob Posted June 15, 2007 Share Posted June 15, 2007 A good rule of thumb is that if an emil is addressed to "Paypal user" or similar,it may be a spoof.Paypal & Ebay tend to send theirs to your username or real name. Wise words. Though it should be noted that Paypal say that they will never use your full name when addressing you in an email. Rob Quote Link to comment Share on other sites More sharing options...
Cinnamon Posted June 16, 2007 Share Posted June 16, 2007 Good point,Rob, thanks. So, first name only - anything else....dump it Quote Link to comment Share on other sites More sharing options...
Geoid Posted June 18, 2007 Share Posted June 18, 2007 make sure that any email from paypal is from paypal.com, and not from paypal.tk etc Quote Link to comment Share on other sites More sharing options...
Popcorn Posted June 18, 2007 Share Posted June 18, 2007 Sorry I haven't got back to you until now - been away. Thanks for the tips everyone. Quote Link to comment Share on other sites More sharing options...
One Man Banned Posted June 19, 2007 Share Posted June 19, 2007 Lots of replies to this and plenty of advice I thought I'd reply, slightly off topic but Hey! I have been getting a lot of spam so changed my Hotmail account and now my main email addy is getting spam (only 1-2 a day but it frustrates me) I'm always terribly particular about giving out my email addy on e-forms and always check whether putting the "tick" in the box will or will not stop the marketing. So one day I got so p****d off I thought of a way to get tough about it. This won't work for everyone though. If I respond to something online (eg a free promotion) I use the email address that I make up from my website. so I create a specific name for what I'm replying to so for free G&B's i'd put gandbpromo190606@......... and check my site inbox. I'm lucky that I can set up accounts that forward mail I want to my proper inbox but you can send anything to (whatever)@one-man-banned.co.uk and I get the email. I also take a screendump from the site which states my marketing preference and so far I have one company to report to the Information Commissioner as they passed my details on - identified by the "fake" email address that I can trace back to the site I used it on. It works for me but I am a right Grumpy old man these days!! A xx Quote Link to comment Share on other sites More sharing options...
