Paypal spoof?

mike65

Anyone here able to "read" this reply e-mail?

Might be a good idea not to click actual links,

https://email-edg.paypal.com/r/YG8Y4TQ/PPXA/6O60AN/YB77M/RURC/R1/h

https://email-edg.paypal.com/r/YG8Y4TQ/PPXA/6O60AN/YB77M/Z6TW/R1/h

https://email-edg.paypal.com/r/YG8Y4TQ/PPXA/6O60AN/YB77M/Y8LW/R1/h

We're constantly working to make PayPal safer, simpler and more convenient for you. This means that from time to time we have to make changes to the terms of our User Agreement and other documents. To keep you informed we've posted some updates we'll be making soon on our website.

What do I need to do?
1. Click link here to read the Policy Update or type www.paypal.co.uk link here into a new browser window, go to ‘Legal Agreements' at the bottom of the page and then click ‘Policy Update’.

2.Please read the Policy Update link here carefully. It contains important legal information about when and how the changes to our User Agreement will become effective.

3.If you agree to the changes, you don’t need to do anything as any updates will automatically come into effect. If you do not wish to accept the changes, we’ve also provided you with the steps you need to take on the Policy Update page.


Please note that the current User Agreement will apply until these changes take effect.

Yours sincerely,

PayPal

edit! I've taken a closer look and its definitely a spoof, whats worrying is that they have my name correct.

PayPal <paypal@e.paypal.co.uk> Save to addressbook
To: XXXXXXXXXXXXXX
Subject: Michael XXXXXX we�ll soon be updating the PayPal User agreement

Carpenter

Are you sure it is a spoof

ShoulderChip

I got this too, spotted the extra e, wasn't going near it either way, cheers for sharing

I'm pretty sure it's not a spoof. GMail verified it as Paypal, anyway. Just look at the domain, it's paypal. The extra e doesn't mean much.

mike65

Is Gmail god now?

I should add, there are two attachments.

mike65

mike65 wrote: »

Is Gmail god now?

I should add, there are two attachments.

Where did I say GMail was god?

It's pretty simple to verify these things. If you'd logged into Paypal and looked for the latest news you'd have seen "Policy Updates". Spoof emails usually attempt to direct you to a fake site: all links in Paypal's email are links to paypal.com. Either that or they ask you to reply with your password. Again, the email didn't ask this.

KoolKid

I'd have to agree. I received this email this morning. It seems genuine. No dodgy links and it even goes into explaining why its not a phishing email.

*Hank Scorpio*

also received this today.

What's the major changes to the user agreements, anyway?

RedXIV

*Hank Scorpio* wrote: »

also received this today.

What's the major changes to the user agreements, anyway?

Alot of extra charges

MrFrisp

Hi Guys...

I logged into My paypal just now,and clicked on the "Policy Updates"

This is what it says...


Amendment to the PayPal User Agreement and Privacy Policy

Effective Date: Sep 07, 2011

PrintDownload PDF

• Please read this document.

You do not need to do anything to accept the changes as they will automatically come into effect on the above date. Should you decide you do not wish to accept them you can notify us before the above date to close your account (https://www.paypal.com/cgi-bin/?&cmd=_close-account) immediately without incurring any additional charges.


So,,if you take into account what the mail you received says,,It's actually genuine I'd say.


Dear

We're constantly working to make PayPal safer, simpler and more convenient for you. This means that from time to time we have to make changes to the terms of our User Agreement and other documents. To keep you informed we've posted some updates we'll be making soon on our website.

What do I need to do?
1.Click here to read the Policy Update or type www.paypal.co.uk into a new browser window, go to ‘Legal Agreements’ at the bottom of the page and then click ‘Policy Update’.2 Please read the Policy Update carefully. It contains important legal information about when and how the changes to our User Agreement will become effective.3.If you agree to the changes, you don’t need to do anything as any updates will automatically come into effect. If you do not wish to accept the changes, we’ve also provided you with the steps you need to take on the Policy Update page.Please note that the current User Agreement will apply until these changes take effect

BaconZombie

The e is a sub-domain off Paypal.co.uk so how does this prove it's a spoof?

mike65 wrote: »

edit! I've taken a closer look and its definitely a spoof, whats worrying is that they have my name correct.

PayPal <paypal@e.paypal.co.uk> Save to addressbook
To: XXXXXXXXXXXXXX
Subject: Michael XXXXXX we&#226;&#65533;&#65533;ll soon be updating the PayPal User agreement

Aprilmay

I got this a couple of weeks ago saying there was unusual activity on my account, Paypal has a spoof email address you can send anything your worried about I just forwarded to them to deal with- this is the address spoof@paypal.com

voxpop

This email is from paypal - email-edg and e are just subdomains.

If you check out the domain on those links posted above and in the email - all the details are paypal and ebay - see below

email-edg.paypal.com


Registrant:
Host Master
PayPal Inc.
2211 North First Street
San Jose CA 95131
US
hostmaster@ebay.com +1.4083767400 Fax:

Domain Name: paypal.com

Registrar Name: Markmonitor.com
Registrar Whois: whois.markmonitor.com
Registrar Homepage: http://www.markmonitor.com

Administrative Contact:
Domain Administrator
eBay Inc.
2145 Hamilton Avenue
San Jose CA 95125
US
hostmaster@ebay.com +1.4083767400 Fax: +1.4083767514
Technical Contact, Zone Contact:
Host Master
PayPal Inc.
2211 North First Street
San Jose CA 95131
US
hostmaster@ebay.com +1.4083767400 Fax:

mike65

I went through my email folder for PP mails about User Agreement and they used to be nothing more than a circular with no clickable links or attachments, they should keep it that way or better still not bother. There is no need to spam mailboxes when a link on the front page of PP would suffice.

orency

Some moderator you are! The extra 'e' means everything. THIS IS A SCAM!. Try Googling 'e.paypal' and you'll soon find out what's going on!

gvn wrote: »

I'm pretty sure it's not a spoof. GMail verified it as Paypal, anyway. Just look at the domain, it's paypal. The extra e doesn't mean much.

orency

orency wrote: »

Some moderator you are! The extra 'e' means everything. THIS IS A SCAM!. Try Googling 'e.paypal' and you'll soon find out what's going on!

The extra "e" is a subdomain of the domain paypal.com (or .co.uk, or whatever it was). Paypal could have "arsebiscuits" as a subdomain of paypal.com and it would still be legitimate, so long as the domain was paypal.com.

If you click on any link in the email just check that the site is HTTPS, then check the certificate. Verisign will verify that you're on the correct website (with Paypal, at least).

KoolKid

orency wrote: »

Some moderator you are! The extra 'e' means everything. THIS IS A SCAM!. Try Googling 'e.paypal' and you'll soon find out what's going on!

Orency, attack the post not the poster, If you have evidence this is a scam lets have it. Everything here suggests this is genuine communication from PayPal.
If it is a scam please explain what the senders have to gain.?

sakej

I've got the same email and forwarded it to paypay this is they answer:

Thanks for forwarding that suspicious-looking email. You're right - it was a phishing attempt, and we're working on stopping the fraud. By reporting the problem, you've made a difference! Identity thieves try to trick you into revealing your password or other personal information through phishing emails and fake websites. To learn more about online safety, click "Security Center" on any PayPal webpage. Every email counts. When you forward suspicious-looking emails to spoof@paypal.com, you help keep yourself and others safe from identity theft. Your account security is very important to us, so we appreciate your extra effort.

So it was scam after all ... but a week to get an answer in that metter is a bit to long to wait if you ask me

mike65

Just got another one!

Michael, Update to the User Agreement, Privacy Policy & Acceptable Use Policy.

Been to paypal through the front door and they do indeed have a policy update. I really wish they wouldn't use attachments.

sakej

mike65 wrote: »

Just got another one!



Been to paypal through the front door and they do indeed have a policy update. I really wish they wouldn't use attachments.

Yes they do have policy update but this email ISN'T legite.
Scammers just using that fact to confuse ppl

I've recive same email
all links going to strange location

https://email-edg.paypal.com/r/HIE8LK0/QF2K1A/ZB8EEWI/A7K2YE/QI23P/QU/h

mike65

I found this which doesn't exactly help matters

http://www.benchmarkemail.com/blogs/detail/email-news-recent-paypal-messages-mistaken-for-phishing-danger

and this

http://www.infoworld.com/t/cyber-crime/paypal-persists-in-sending-phishing-friendly-emails-693

sakej

well.. this may indeed not be phishing but it sure looks like it

anyway. goes straight to bin

actuallylike

Just got one too. My paypal emails are redirected into a paypal folder so when this arrived in my inbox alarms stared going. Have to say though, that was the only thing that made me cautious, best phishing email I've ever seen.

Also to the mods of this thread. I stumbled upon this thread through a google search. It was only till post 18 that it's confirmed as a hoax, the previous posts are all about how it's fine, click away. Maybe if one of you could edit the OP to show that it is in fact a scam? some people might just read the first 15 posts and then end up trusting it.

batistuta9

actuallylike wrote: »

Just got one too. My paypal emails are redirected into a paypal folder so when this arrived in my inbox alarms stared going. Have to say though, that was the only thing that made me cautious, best phishing email I've ever seen.

Also to the mods of this thread. I stumbled upon this thread through a google search. It was only till post 18 that it's confirmed as a hoax, the previous posts are all about how it's fine, click away. Maybe if one of you could edit the OP to show that it is in fact a scam? some people might just read the first 15 posts and then end up trusting it.

post #18 is over a year old & nothing to do with the ones got yesterday

actuallylike

batistuta9 wrote: »

post #18 is over a year old & nothing to do with the ones got yesterday

The fact the email had an 'e' in the email address made me suspicious so that's what I googled bringing me here. Then all the responses say that it's not an issue when post 18 confirms it is. The email I got is very similar to what is described, if not identical. How do you know what email I got by the way?

batistuta9

actuallylike wrote: »

The fact the email had an 'e' in the email address made me suspicious so that's what I googled bringing me here. Then all the responses say that it's not an issue when post 18 confirms it is. The email I got is very similar to what is described, if not identical. How do you know what email I got by the way?

we know all about you. :pac:

people here explained the 'e' in the email add. this is a legitimate paypal email add.

you can spoof an email add. you know, it's the links you should take a look at

best thing to do would be to ask paypal yourself about it, to see what they say.

actuallylike

But the posts saying to trust it are saying that if the email is e.paypal.co.uk then it is trustworthy when it has been shown it is not necessarily so. A quick google search for "e.paypal.co.uk" doesn't just bring this page up, it brings up a whole host of other websites with avoid been the advice given.

RoyalMarine

well then you have a simple choice to make

just ignore it

or

email paypal using their online help center, forward them the mail you got, and ask if its genuine.

Paddysnapper

And all this is the reason I cancelled my PayPal account years ago:eek: