Is this a paypal scam?
Turbo Mini Forums

Got this mail last week, and thought it was a scam, and ignored it.
Got it again today...







Clicking on the link brings me here:





Now, I'm really suspicious of this kind of stuff - so haven't done owt. Note the web address is not https://www.paypal.commmm like I normally see - also, my paypal username is not automatically filled in like it normally is when I log on.

Finally, when I log into paypal, there is no reference to this email warning - surely they'd put some kind of alert message up for me?
So, does this look like a scam mail?

spam
ignore it.

you could actually call them, as you're in the US, ask them if its real if in any doubt.

Or log in to your account making sure you use the proper PayPal address.

That way if there is a genuine problem you will find out about it, if it is a scam then there will be nothing any different.

You could also try sending the web address to eBay as they have an email address for reporting spoofs.

I had something similar with ebay, iirc, asking me to log in from the email to confirm some security update. I didn't do it and my ebay is fine

I've logged in as normal - no messages, that's why I was sure it was spam.

It's a pretty good one however - only the numbers after the http bit made me suspicious - all the other links on the 'scam page' work fine...

Cheers guys!

that's an IP address, i.e. a webserver set up on someone's home PC to collect paypal logins!

aaaah - so if ever I see numbers after the Http thingy, I need to put my 'caution' hat on...

Cheers Alex. Competery tech is not my strong point.

not always, sometimes it's legit. but definatley if from an eel-mail

got one similar the other day, apparently someone in europe had tried accessing my paypal account!!

y its a scam, one quick way to tell is the use of an IP address, and the fact paypal ALWAYS uses secure HTTPS:// instead of HTTP:// when logging in.

aaaaah - so the s after http means Secure?

so what is the http thingy then?

High Temperature Tit Paint??

Who cares a to$$ anyway........the internet works, that is all I want to know about it!!!!!

HTTP stands for Hypertext Transfer Protocol, this is the communication protocol used to connect to servers on the World Wide Web. The primary function of HTTP is to establish a connection with a Web server and transmit HTML pages to the user's browser.

HTTPS means the page is secure, and you know whatever data you enter onto the page will be sent across the Internet securely.

Now although if a site uses HTTPS doesnt mean its good or bad, in paypal's case, if its says https://www.paypal.com/ in the address bar then you KNOW for sure its paypal and not a spoof.

A little tip is to hover your mouse over the link in the email and see if the addresss in the little yellow tooltip box that pops up is the same as the link in the email. Sooo many people get caught out by assuming its safe because the 'from' email address appears to come from a reputable company or the link LOOKS ok in the email - both are dead easy to make look genuine.

At the end of the day, if you're not sure, dont click.

Edited by Mike on 27th Apr, 2005.

dave if it was genuine then you have to log in to paypal or ebay in the normal way then change you security passwords that way, not via a link from a email i think its spam, so ignor it.

ive had a genuine one from ebay once , and the email told me to log in then change my password.

hope this helps.

always looking for them bigger bunches of bannanas

got another one last night, this time my ID was accessed in albania!!!

just ignore them, paypal are not bothered WHERE your account is accessed from at all.

Also just to add from email address are quite easy to spoof anyhow so you should never trust an email like that on the senders address alone.

dave, post your username and password and we'll check it out for you

Team Racing

lol

found it!
dale@trainspotters.com password limegreentrousers

Team Racing

ho ho ho - My sides...

A little more...

Just clicked 'edit>properties' on the email, and these two websites were listed in the various bits of text!


http://ip161.gte202.dsl-acs2.sea.iinet.com which going off the 'disclaimer' doesn't look like an ideal site to vist!


and


http://spamoeb.ru/cgi-bin/ppr.htm - which when you click turns into the 'false' paypal page!

http://www.spamoeb.ru alone takes you to some dodgy looking russian forum...

Crazy sh1t!

Dave Coxon - the Hacker.

just got another!!!!

Sent my collection of them off to Paypal for them to ignore...