|
|
|
|
|
|
|
|
|
|
PayPal Account Suspended
PayPal
|
|
|
|
|
|
|
|
|
Date Reported: 18th October 2005 |
Risk Level: MEDIUM |
|
|
|
|
|
Email Subject: |
PayPal Account Suspended |
|
Apparent Sender: |
PayPal |
|
Return Address: |
PayPal Services < support@us.paypal.com > |
|
Email Format: |
HTML |
|
URL of Web Content: |
http://193.227.1.9/.ssl/index.html |
|
Location: |
Egypt |
|
Scam number: |
aa-1431 |
|
Comments: |
-
Email asks you to confirm/update/verify your account data at PayPal by visiting the given link. You will be taken to a spoof website where your details will be captured for the phishers.
- PayPal never send their users emails requesting personal details in this way.
-
The REAL URL of the spoof website is disguised as "https://www.paypal.com/cgi-bin/webscr? cmd=_login-run".
-
The spoof website this email links to was not online at time of this report, but variations of the scam which link to working websites are bound to exist, so be wary! The website may have been taken down or disabled by the hosts, but quite often these websites are hosted on the personal computer of the phishers, so may only be online at certain times.
-
The REAL URL of the spoof website looks nothing like the actual PayPal URL.
|
|
|
|
|
|
|
|
|
|
"PayPalŪ is committed to maintaining a safe environment for its community of
buyers and sellers."
|
Dear valued PayPalŪ member:
PayPalŪ is committed to maintaining a safe environment for its community of
buyers and sellers. To protect the security of your account, PayPal employs
some of the most advanced security systems in the world and our anti-fraud
teams regularly screen the PayPal system for unusual activity.
Recently, our Account Review Team identified some unusual activity in your
account. In accordance with PayPal's User Agreement and to ensure that your
account has not been compromised, access to your account was limited. Your
account access will remain limited until this issue has been resolved. This
is a fraud prevention measure meant to ensure that your account is not
compromised.
In order to secure your account and quickly restore full access, we may
require some specific information from you for the following reason:
We would like to ensure that your account was not accessed by an
unauthorized third party. Because protecting the security of your account
is our primary concern, we have limited access to sensitive PayPal account
features. We understand that this may be an inconvenience but please
understand that this temporary limitation is for your protection.
Case ID Number: PP-287-412-416
We encourage you to log in and restore full access as soon as possible.
Should access to your account remain limited for an extended period of
time, it may result in further limitations on the use of your account.
However, failure to restore your records will result in account suspension.
Please update your records on or before October 28, 2005.
Once you have updated your account records, your PayPal session will not be
interrupted and will continue as normal.
To verify and/or update your account records click on the following link:
https://www.paypal.com/cgi-bin/webscr? cmd=_login-run
Thank you for your prompt attention to this matter. Please understand that
this is a security measure meant to help protect you and your account. We
apologize for any inconvenience.
Sincerely,
PayPalŪ Account Review Department
PayPal Email ID PP4486
Visit our Privacy Policy and User Agreement if you have any questions.
http://www.paypal.com/cgi-bin/webscr? cmd=p/gen/ua/policy_privacy-outside
|
|
|
Website: |
|
|
|
Spoof website not online at time of report...
|
|
|
|
|
|
|
|
|
See our most recent scam reports |
|
Browse our scam report archives |
|
Search |
Please send us any scam/phishing emails you have received by reporting them here
For access to our huge blacklist of domain names and to sign up to our live feed of ALL the scams we receive please take a look at our Honeytrap service
If you have received the email below, please remember that it is very common for these email scams to be redistributed at a later date with only slightly different content, such as a different subject or return address, or with the fake webpage(s) hosted on a different webserver.
We aim to report every variant of the scams we receive, so even if it appears that a scam you receive has already been reported, please submit it to us anyway.
|
|
|
|
|
|