BEWARE - I just got phished

Metalgoth · #1 02-27-2007, 02:20 PM

Hi there-

I'm a regular here, I buy and sell, and I thought I should remind people. Today I got an email from 'service@paypal.com' telling me access to my account has been limited due to a security breach. It ended like this:

"We thank you for your prompt attention to this matter. Please understand that this is a security measure intended to help protect you and your account. We apologize for any inconvenience.

Sincerely,
PayPal Account Review Department"

I clicked on it, ended up at a site that looked authentic. I started to enter a credit card when I noticed they also wanted the PIN number. Then I looked at the URL and noticed that it didn't start with httpS://

No legitimate service would ask for your PIN, nor would they send that kind of email. I immediately went to the real site and changed my password. (I'd stupidly 'logged in' to the scam site)

Be careful, this stuff really does happen.

Demiurge · #2 02-27-2007, 02:38 PM

Quick tip: if you ever get an email supposedly from e-bay or pay-pal, you can forward the email to spoof @ [e-bay or pay-pal, depending] .com, and within a short amount of time (a couple hours tops), they can verify whether or not it was a legit email sent by them. Of course, you can always just log-in (not through the email!!!!) and check your messages there, too.

**elcid** · #3 02-27-2007, 05:59 PM

I had someone try something like that with me once, but the URL was wrong when I clicked on it. I sent it to the bay, and their awesome customer service responded that they could not verify if it was real or fake.

Rotti · #4 02-27-2007, 06:10 PM

LOL ****'s awesome customer service alright.

supermau · #5 02-27-2007, 06:14 PM

I get those all too often. The URL's are a good giveaway.

C.Thep · #6 02-27-2007, 06:48 PM

Thanks for the heads up

jemboyee · #7 02-27-2007, 07:12 PM

I use Eudora as my mail client. All you have to do is hover your mouse pointer over the link in the email and it will tell you if it's authentic or not.

newbieguitarmaker · #8 02-27-2007, 07:20 PM

man once i got an email from "paypal" saying email has been added i clicked the link to see wtf was going on, so i started logining in but by the time i was halfway done with my email my comp told me it was a fake site and i looked up at the url and it had a https and it had some ip in the url, glad my comp tells me these things *rubs case*

jemplayer55 · #9 02-27-2007, 07:36 PM

I know it's been said here before and many times..... but anytime you get an e-mail from Evilbay or PayPal, always go to those sites to verify the e-mail. It (the same e-mail) should be in your e-b@y account mail "in box". If not, it's someone phishing.

You were lucky to have noticed it wasn't a secure HTTP.

Clydefrog · #10 02-27-2007, 08:02 PM

A tip:

When signing up, **** and Paypal say directly that they will NEVER ask you via e-mail to change any of your info. They do that when you actually log into their website itself.

dragsternj · #11 02-27-2007, 08:06 PM

Quote:

Originally Posted by Metalgoth

authentic. I started to enter a credit card when I noticed they also wanted the PIN number. Then I looked at the URL and noticed that it didn't start with httpS://

The whole URL must have been totally different not just the s. And as Clydefrog says..... never

ibanez2005 · #12 02-27-2007, 08:10 PM

The bay should be shut down till they can make sure REAL HONEST dealers can trade safely, they suck big time.

Metalgoth · #13 02-28-2007, 12:55 AM

Ok, I don't blame you for moving the thread. I figured maybe it was more appropriate in Reseller Talk, but I almost never go there. I wanted the most people possible to see it. It was just unnerving realising how close I came to giving all that info to crooks. If I'd been half asleep, or distracted, I might be out hundreds or thousands of dollars right now.

Anyway, I reported it, heard back from Paypal, who said that it was, indeed, a scam. My signon info there is changed, and there were no strange charges. People just have to know what's possible and what to look for. Read up on the security in your browser and on your websites.

TongueShredder · #14 02-28-2007, 09:53 AM

I got tonnes with email like that supposedly from **** and pay-pal, I just ignored them.

Internet is just not a safe place to do anything.....

jemuniverse777 · #15 02-28-2007, 01:51 PM

I just got phished today for a 2nd chance offer on the bay. I was outbid on a UV but somehow they were able to get my username and email. I thought fleabay was now protecting bidders id by using a number system. I almost fell for the crap too because my last bid wasnt real high. So what I did was log into my actual account to see if a 2nd chance offer was there. And to my surprise-fuch no. Well the email that was sent to me was traced back to the UK and was an aol account. Forwarded the email to the FBI, fleabay, and some UK investigation bs.