New Posts New Posts RSS Feed: paypal phish
  FAQ FAQ  Forum Search   Register Register  Login Login

paypal phish

 Post Reply Post Reply
Author
winging it View Drop Down
Really should get out more
Really should get out more
Avatar

Joined: 22 Mar 07
Online Status: Offline
Posts: 3958
Post Options Post Options   Quote winging it Quote  Post ReplyReply Direct Link To This Post Topic: paypal phish
    Posted: 13 Apr 10 at 9:33pm
if you get an email supposedly from paypal, looking pretty authentic but about policy update, it is a phish!  beware!
the same, but different...

Back to Top
Merlinboy View Drop Down
Really should get out more
Really should get out more


Joined: 03 Jul 06
Location: United Kingdom
Online Status: Offline
Posts: 3169
Post Options Post Options   Quote Merlinboy Quote  Post ReplyReply Direct Link To This Post Posted: 13 Apr 10 at 9:56pm
I had it and opened it up but didn't click a link am i OK???
Back to Top
JohnW View Drop Down
Really should get out more
Really should get out more
Avatar

Joined: 17 Jul 07
Location: United Kingdom
Online Status: Offline
Posts: 552
Post Options Post Options   Quote JohnW Quote  Post ReplyReply Direct Link To This Post Posted: 13 Apr 10 at 10:21pm

I had a paypal policy update email today that I believe was genuine - The link within it directed me to a https://cms.paypal.com site (I double checked before clicking)  the site had a valid certificate so I dont think it was a phish. 

All the urls were valid, depite having lots of viewstate data in the link (removed from above) which did make it look a bit iffy.

Unless there is a parallel phish going about too, I think it is genuine (change of terms so you cant send money to accounts in India, China and Germany.

 

 



Edited by JohnW
Back to Top
timeintheboat View Drop Down
Really should get out more
Really should get out more


Joined: 01 Feb 07
Location: United Kingdom
Online Status: Offline
Posts: 615
Post Options Post Options   Quote timeintheboat Quote  Post ReplyReply Direct Link To This Post Posted: 13 Apr 10 at 11:49pm
I'm with John W, the one I got was genuine it names me directly and then goes....

We are constantly working to make PayPal safer, simpler and more=20
convenient for our customers=2E This means that from time to time=20
we have to make changes to the terms of our User Agreement=2E=20

To make sure you are always informed we have posted recent=20
updates on our website=2E To view these updates:=20

etc.

If in doubt I normally check the source of the email (ctrl+U in Thunderbird) and this one is genuine.



Like some other things - sailing is more enjoyable when you do it with someone else
Back to Top
alstorer View Drop Down
Really should get out more
Really should get out more
Avatar

Joined: 02 Aug 07
Location: Cambridge
Online Status: Offline
Posts: 2899
Post Options Post Options   Quote alstorer Quote  Post ReplyReply Direct Link To This Post Posted: 14 Apr 10 at 6:44am
Aye. If you type the address into your browser afresh, and log in as normal, you'll find a message about this- for me, it was on the right under "To do".
-_
Al
Back to Top
LarFinn View Drop Down
Newbie
Newbie
Avatar

Joined: 14 Apr 10
Location: Roadford Lake, Devon
Online Status: Offline
Posts: 38
Post Options Post Options   Quote LarFinn Quote  Post ReplyReply Direct Link To This Post Posted: 14 Apr 10 at 7:00am
I got this message over night and it looked very genuine....but so did my wife and she does NOT have a Paypal account...(She prefers to spend my money!)
Andi

Finn GBR75



Back to Top
JohnW View Drop Down
Really should get out more
Really should get out more
Avatar

Joined: 17 Jul 07
Location: United Kingdom
Online Status: Offline
Posts: 552
Post Options Post Options   Quote JohnW Quote  Post ReplyReply Direct Link To This Post Posted: 14 Apr 10 at 12:57pm

Originally posted by LarFinn

I got this message over night and it looked very genuine....but so did my wife and she does NOT have a Paypal account...(She prefers to spend my money!)

My wife also got the message, so I was suspicious as I dint think she had a paypal account (also likes to spend my money), but it turns out she does and again it was genuine.

Seems like there may be real and phishing emails going around at the same time.

Back to Top
Mister Nick View Drop Down
Far too distracted from work
Far too distracted from work
Avatar

Joined: 01 Aug 09
Location: United Kingdom
Online Status: Offline
Posts: 389
Post Options Post Options   Quote Mister Nick Quote  Post ReplyReply Direct Link To This Post Posted: 14 Apr 10 at 7:06pm
I haven't got one, but if any of you do get emails like
that, make sure that you do not click any links that they
offer you, or enter any personal details (unless you are
absolutely certain that the website is genuine).
Generally, if the part of the site that requires you to
enter your details has 'https' at the beginning of the
URL it should be safe.
Also, if you right click on the email, select options and
read the section titled 'Internet Headers' it should tell
you the email address that the email was sent from, and
more importantly, the IP address(Works with MS Outlook,
not sure about other applications-it is probably a
similar process though). If you run that through an IP
locator (Google it) you can work out where the email was
sent from (providing that the sender wasn't using a
proxy, but even if they were it still probably wouldn't
add up)and therefore, deduce how likely it is to be
genuine.

Edited by Mister Nick
Back to Top
MerlinMags View Drop Down
Admin Group
Admin Group
Avatar

Joined: 19 Mar 04
Location: UK, Guildford
Online Status: Offline
Posts: 588
Post Options Post Options   Quote MerlinMags Quote  Post ReplyReply Direct Link To This Post Posted: 14 Apr 10 at 11:08pm
Whatever email you get, from Paypal or your bank, if you want to be safe: IGNORE links in the email.

Log into your account as you would do normally, by typing the address in yourself, and that way you should be ok.

Remember that for bank accounts where they usually ask you for "digit two of your passcode" etc, they will NEVER ask you for your entire password online or on the phone.
Back to Top
Guests View Drop Down
Guest Group
Guest Group
Post Options Post Options   Quote Guests Quote  Post ReplyReply Direct Link To This Post Posted: 15 Apr 10 at 2:30pm

Originally posted by MerlinMags

Whatever email you get, from Paypal or your bank, if you want to be safe: IGNORE links in the email.

Log into your account as you would do normally, by typing the address in yourself, and that way you should be ok.

Remember that for bank accounts where they usually ask you for "digit two of your passcode" etc, they will NEVER ask you for your entire password online or on the phone.

Yep thats the advice.

I always ignore them, delete them and if I am interested I will call them up to check.

Timg

Back to Top
 Post Reply Post Reply

Forum Jump Forum Permissions View Drop Down

Bulletin Board Software by Web Wiz Forums® version 9.665y
Copyright ©2001-2010 Web Wiz
Change your personal settings, or read our privacy policy