anyone seen this before?

silent gav

My da got an official lookin e-mail from what looked like paypal saying there had been unusual activity in my account it had been temporarily suspend and to click a link to restart it. the link linked to this...

http://pc-84-73-86-200.cm.vtr.net/~www.paypal.com/cgi-bin/webscrcmd=_login-run/index.php

it's an exact copy of the paypal site with everything linked to the real paypal site except when you log in it asks for your credit card details like when your adding a credit card on pay pal. thought it was quite smart. sure some people have fallin for it.

Black Swan

Don't click the link!:eek:

Ruu_Old

Just delete the email and if you did enter your details in there, then contact your credit card company.

silent gav

no i realised straight away. just went to see what it was. i saw it only linked to a html page so i wasn't worried. but i just thought it was well done.

Hail 2 Da Chimp

Click it... go on... you know you want to

Kwekubo

A bank or a service like Paypal will never contact you like that by email. Always double check where a link in an email will take you before clicking on it, there's a lot of tricks these phishers can use.

Giblet

silent gav wrote:

no i realised straight away. just went to see what it was. i saw it only linked to a html page so i wasn't worried. but i just thought it was well done.

I'm afraid being "only a html page" doesn't mean it can't do anything.

kdouglas

the best thing to do in a situation like that is to login to the paypal (or ebay,amazon etc...) website directly by typing the url yourself

cornbb

Wow, dodgy. I've gotten strange emails like that from paypal before that looked supsicious but actually turned out to be real.

The basic rule is don't trust any website whose url doesn't begin with https://www.paypal.com/

You can download the ebay toolbar here: http://pages.ebay.com/toolbar/accountguard_1.html It'll automatically warn you of any website it suspects to be a spoof ebay or paypal site.

Nightwish

My boyfriend has gotten that email 3 times. He forwarded it to Paypal who confirmed it was fake.

Zapp Brannigan

You can tell its a fake eBay/Paypal e-mail if it starts with 'Dear Paypal/eBay member'. As neither of the companys use that, they always begin the e-mail with your name.

Sparky

I used a spoof email and password. Then a CC page came up.

It even asks for an ATM pin number.

Squall

Yup ive seen this before.

If you get the IP address of the web server and put it in a browser you get some asian website

Faith

I got one from "Dave" at WorldPay that really freaked me out. It was all about how there had been some mix-up and I owed them £150, which they were taking from my credit card. Down at the bottom, it said "Click this link for details of our policies" or something. I had to google to make sure it was fake. I didn't even trust my memory, it was so good.

Ruu_Old

Theres so many of those out right now. I regularly get ones from Barclays (and other banks I've never heard of) asking me to "update my details" because they are "upgrading their systems". Sometimes the entire email comes in as an image map to fool the email application or anti spam filter, funny stuff.

Yes I got one of those before. It's a phishing scam.

I've often clicked these for the crack and I've seen that most of them actually use scripting to force the window to maintain focus. Real sites wouldn't do that!

FranknFurter

Be very very careful of these, they are getting more and more convincing.
Never click the link, (even if you dont put any info in, clicking it shows them your email is a live account), and email paypal.com ASAP asking them to verify the info stated.

Ive gotten these from addies marked as "Paypal.com" before, emailed paypal on the abuse section of the real paypal.com site, turned out to be another fishing mail. so be careful. No matter how real it looks, even if it IS real, never click on the link, never give any info or reply until you email paypal themselves from the real site www.paypal.com and verify it. They have no problem doing that and prefere it when you do.

Look here -> https://www.paypal.com/cgi-bin/webscr?cmd=_vdc-security-spoof-outside

b

Ruu_Old

https ftw, otherwise its nothing worth looking at.

Archeron

Ruu, you mentioned the Barclays ones. Its funny, just came into work this morning, and there is one from Barclays asking for your details, and it has an amazing amount of spelling mistakes. The next mail in after that one is another Barclays one saying that the first one is fake, and asking you to follow THIS link to update your information to make sure you werent scammed by the original mail. Same spelling mistakes in the second one too.

Unbelievable.

Terry

got that exact same e-mail the other day.
i knew it was a fake because i don't have a paypal or e-bay account.
clicked the link anyway and sure enough, they wanted my credit card details.
sorry, folks. no credit card details for you. i don't have one and there was never one used on this pc, so any spyware you may have installed won't do you any good.

Kolodny

I've had a couple of emails recently purporting to be from Nationwide and Egg(neither of which I have an account with), asking for me to confirm my details. If you don't reply after 2 days they send a second mail asking the same thing with the header 'Urgent'. I wonder how many people fall for this?

Terry

i wopuld imagine quite a few people do.
not everyone is net savvy.
plenty of people new to the net might also fall for it.

aidan24326

I used to work for PayPal and one surefire way to know a fake email is if it starts with 'Dear PayPal customer' or 'Dear Sir' or something non-specific like that. A real PayPal email will ALWAYS begin with your FULL NAME e.g Dear Andrew Smith or Dear Helen Murphy, if it doesn't have that opening you can bin it immediately. Also you will never ever be asked to click on a link in a real email. So again if there's a link, which there generally will be in the fake ones, you know straight away it's a dud. If you get a fake, or suspected fake email, forward it to spoof@paypal.com, rather than just deleting it. It's amazing how many people actually fall for these scams. It's particularly easy for the scam artists to target an internet financial company like paypal, where all business is done online and it's inevitable that a certain % of users will not be up to speed with the ways of the internet.

That one where they sent out a second mail claiming to be warning about the previous one (and of course still asking for your details) is really taking the p*ss.