I`m reposting this post as it seems it has never show up yesterday....





Hello Everyone!


Caution... spoofing email.....

I`m using paypal for my ebay purchase and I thought I would share this info
with you.
Two days ago, I got the following email. This is a spoofing email and should
never be use. I have filled a complaint to paypal.

Here`s the email I got:

----- Original Message -----
From: PayPal
To: Paypal Customers
Sent: Friday, October 21, 2005 2:19 PM
Subject: Your Account





Dear valued PayPal® member,

Due to recent fraudulent transactions, we have issued the following security
requirements.

It has come to our attion that 98% of all fraudulent transactions are caused
by members using stolen credit cards to purchase or sell non existant items.
Thus we require our members to add a Debit/Check card to their billing
records as part of our continuing commitment to protect your account and to
reduce the instance of fraud on our website. Your Debit/Check card will only
be used to identify you. If you could please take 5-10 minutes out of your
online experience and renew your records you will not run into any future
problems with the PayPal® service. However, failure to confirm your records
will result in your account suspension.

We are requesting this information to verify and protect your identity.
Federal regulations require all financial institutions to obtain, verify,
and record identification from all persons opening new accounts or obtaining
ongoing payment services. This is in order to prevent the use of the U.S.
banking system in terrorist and other illegal activity. For these reasons,
PayPal® will utilize services provided by various credit reporting agencies
to verify the information you submit to us.

Once you have updated your account records your pending PayPal® account
transactions will not be interrupted and will continue as normal.

To update your billing records please login to your account by clicking
here.

Thank you for your time,
PayPal® Billing Department.


------------------------------------------------------------ --------------------
Copyright © 1995-2005 PayPal Inc. All Rights Reserved. Designated trademarks
and brands are the property of their respective owners. Use of this Web site
constitutes acceptance of the PayPal User Agreement and Privacy Policy.





And here`s the answer I got from Paypal website...




Dear Claude,

Thank you for contacting PayPal. We appreciate you bringing this
suspicious email to our attention.

Commonly referred to as phishing, these emails are sent by fraudsters in
an attempt to collect sensitive personal or financial information from
the recipients. PayPal takes phishing threats seriously. Our fraud
prevention specialists are working 24/7 to help protect you and enable
the community to stay safe.

After review, we can confirm that the email you received was not sent by
PayPal. Any website which may be linked to this email is not authorized
or used by PayPal.

Our fraud prevention team is working to disable any website linked to
this email. In the meantime, please do not enter any information into
this website. If you have already done so, you should immediately log
into your PayPal account and change your password, as well as your
security questions and answers. We also recommend that you contact your
bank and credit card company immediately.

If you notice any unauthorized activity on your PayPal account, please
report it to us by following the instructions below:

1. Log in to your account only from the PayPal website. Do not use
links provided in any email.

2. Click on the Security Center link at the bottom of the page.

3. Click on the 'Unauthorized Transaction' link under the Report a
Problem column.

4. Follow the instructions on this page in order to access the
appropriate form.

Lastly, we recommend taking a few steps to protect yourself from
identity theft:

> Download the SafetyBar, a toolbar for Outlook and Outlook Express,
which identifies known spoof emails.
> Get eBay Toolbar with Account Guard which warns you when you're on a
potentially fraudulent (spoof) Web site.
> Frequently monitor your account for suspicious activity.

For additional tips please visit the PayPal Security Center at
http://www.paypal.com/security.

Once again, thank you for reporting this suspicious email. Your
vigilance helps us in our efforts to protect the PayPal community. If
you have any further questions, please feel free to contact us again.

Sincerely,

PayPal
______________________________

Important: PayPal and its representatives will NEVER ask you to reveal
your password. There are NO EXCEPTIONS to this policy. If anyone
claiming to work for PayPal asks for your password under any
circumstances, by email or by phone, please refuse and immediately
contact us via our secure webform online

Claude




------------------------------------------------------------ --------------------

1. Log in to your account only from the PayPal website. *Do not use
links provided in any email.*

I was getting these things in my email before I had an ebay account. I get
them from banks too. NEVER give personal info to anybody because an email
asks you to. Unless they promise you a share of $20,000,000.00!!!!

"Phalguy" <Phalguy [at] MEALYvideotron.ca> wrote in message
news:SI47f.8136$bh4.629462 [at] weber.videotron.net...
> I`m reposting this post as it seems it has never show up yesterday....
>
>
>
>
>
> Hello Everyone!
>
>
> Caution... spoofing email.....
>
> I`m using paypal for my ebay purchase and I thought I would share this
> info
> with you.
> Two days ago, I got the following email. This is a spoofing email and
> should
> never be use. I have filled a complaint to paypal.
>
> Here`s the email I got:
>
> ----- Original Message -----
> From: PayPal
> To: Paypal Customers
> Sent: Friday, October 21, 2005 2:19 PM
> Subject: Your Account
>
>
>
>
>
> Dear valued PayPal® member,
>
> Due to recent fraudulent transactions, we have issued the following
> security
> requirements.
>
> It has come to our attion that 98% of all fraudulent transactions are
> caused
> by members using stolen credit cards to purchase or sell non existant
> items.
> Thus we require our members to add a Debit/Check card to their billing
> records as part of our continuing commitment to protect your account and
> to
> reduce the instance of fraud on our website. Your Debit/Check card will
> only
> be used to identify you. If you could please take 5-10 minutes out of your
> online experience and renew your records you will not run into any future
> problems with the PayPal® service. However, failure to confirm your
> records
> will result in your account suspension.
>
> We are requesting this information to verify and protect your identity.
> Federal regulations require all financial institutions to obtain, verify,
> and record identification from all persons opening new accounts or
> obtaining
> ongoing payment services. This is in order to prevent the use of the U.S.
> banking system in terrorist and other illegal activity. For these reasons,
> PayPal® will utilize services provided by various credit reporting
> agencies
> to verify the information you submit to us.
>
> Once you have updated your account records your pending PayPal® account
> transactions will not be interrupted and will continue as normal.
>
> To update your billing records please login to your account by clicking
> here.
>
> Thank you for your time,
> PayPal® Billing Department.
>
>
> ------------------------------------------------------------ --------------------
> Copyright © 1995-2005 PayPal Inc. All Rights Reserved. Designated
> trademarks
> and brands are the property of their respective owners. Use of this Web
> site
> constitutes acceptance of the PayPal User Agreement and Privacy Policy.
>
>
>
>
>
> And here`s the answer I got from Paypal website...
>
>
>
>
> Dear Claude,
>
> Thank you for contacting PayPal. We appreciate you bringing this
> suspicious email to our attention.
>
> Commonly referred to as phishing, these emails are sent by fraudsters in
> an attempt to collect sensitive personal or financial information from
> the recipients. PayPal takes phishing threats seriously. Our fraud
> prevention specialists are working 24/7 to help protect you and enable
> the community to stay safe.
>
> After review, we can confirm that the email you received was not sent by
> PayPal. Any website which may be linked to this email is not authorized
> or used by PayPal.
>
> Our fraud prevention team is working to disable any website linked to
> this email. In the meantime, please do not enter any information into
> this website. If you have already done so, you should immediately log
> into your PayPal account and change your password, as well as your
> security questions and answers. We also recommend that you contact your
> bank and credit card company immediately.
>
> If you notice any unauthorized activity on your PayPal account, please
> report it to us by following the instructions below:
>
> 1. Log in to your account only from the PayPal website. Do not use
> links provided in any email.
>
> 2. Click on the Security Center link at the bottom of the page.
>
> 3. Click on the 'Unauthorized Transaction' link under the Report a
> Problem column.
>
> 4. Follow the instructions on this page in order to access the
> appropriate form.
>
> Lastly, we recommend taking a few steps to protect yourself from
> identity theft:
>
>> Download the SafetyBar, a toolbar for Outlook and Outlook Express,
> which identifies known spoof emails.
>> Get eBay Toolbar with Account Guard which warns you when you're on a
> potentially fraudulent (spoof) Web site.
>> Frequently monitor your account for suspicious activity.
>
> For additional tips please visit the PayPal Security Center at
> http://www.paypal.com/security.
>
> Once again, thank you for reporting this suspicious email. Your
> vigilance helps us in our efforts to protect the PayPal community. If
> you have any further questions, please feel free to contact us again.
>
> Sincerely,
>
> PayPal
> ______________________________
>
> Important: PayPal and its representatives will NEVER ask you to reveal
> your password. There are NO EXCEPTIONS to this policy. If anyone
> claiming to work for PayPal asks for your password under any
> circumstances, by email or by phone, please refuse and immediately
> contact us via our secure webform online
>
> Claude
>
>
>
>
> ------------------------------------------------------------ --------------------
>
>
>
>
>

On Mon, 24 Oct 2005 08:46:28 -0400 in <SI47f.8136$bh4.629462 [at] weber.videotron.net> Phalguy <Phalguy [at] MEALYvideotron.ca> wrote:
[SNEEP]

Get an email client that can show all headers.

You should see as the topmost [1] Received line something like
Received: from email-83.paypal.com (email-83.paypal.com [206.165.246.83])
by mouse.private.neotoma.org (Postfix) with ESMTP id 7D7C8141D
for <spamtrap [at] private.neotoma.org>; Wed, 19 Oct 2005 09:15:28 -0400 (EDT)
for a valid email from paypal.
I'll leave a windows geek to the DNS resolution part but the name should
resolve to the IP in square brackets, and the IP should resolve to the name.
The by part should be your ISP's mail server.

Unfortunately, paypal uses gerbil force, sorry glbx, for hosting and have
not had their own subnets registered.

For added amusement, the average phishing expedition these days
will contain only one URL that isn't from the site being phished.
I'd love to have seen paypal shutdown all the web servers listed
in the email.

[1] If your ISP has a collection of mail servers that receive and
virus scan email prior to putting it on the server where you retrieve
the email, it'll be the next to the top one.


--
Chris Dukes
Suspicion breeds confidence -- Brazil

On 2005-10-24 08:46:28 -0400, "Phalguy" <Phalguy [at] MEALYvideotron.ca> said:

> I`m reposting this post as it seems it has never show up yesterday....
>
> Hello Everyone!
>
>
> Caution... spoofing email.....
>
> I`m using paypal for my ebay purchase and I thought I would share this info
> with you.
> Two days ago, I got the following email. This is a spoofing email and should
> never be use. I have filled a complaint to paypal.


I get these from time to time, it's been going on for a long time. All
you can do is send the email WITH HEADERS to Paypay's spoof address and
let them look into it.

Paypal is fine to use.


--
PCs, like air-conditioners, are useless when you open Windows.

I get these fairly regularly. If you can be bothered just forward them to;

spoof [at] paypal.co.uk
or
spoof [at] ebay.co.uk
I expect there's a US equivalent.
jc

Hello All;

I thinnk the safest route is to NEVER access any of your financial
accounts or the homepages of the companies from an email. I'd just
open a new window and access the financial site directly from my
favorites. That way you can check what they're claiming, and it's
usually bogus.

Also keep in your address book the email address to report fraud from
each of your instutions so you can forward the bogus mail to the
appropriate authorities.

Dave
Milwaukee
zone 5...IF I'm lucky



john carruthers wrote:
> I get these fairly regularly. If you can be bothered just forward them to;
>
> spoof [at] paypal.co.uk
> or
> spoof [at] ebay.co.uk
> I expect there's a US equivalent.
> jc