More cunning PayPal phishing email

[Squirrel God]

Just got this.

Dear PayPal Member,

Your account has been randomly flagged in our system as a part of our routine security measures. This is a must to ensure that only you have access and use of your PayPal account and to ensure a safe PayPal experience. We require all flagged accounts to verify their information on file with us. To verify your Information at this time, please visit our secure server webform by clicking the hyperlink below

Click here to verify your Information




Thank you for using PayPal!
The PayPal Team

The link to click is:

http://www.paypal.com.flagged.info/?login_cmd=login_access=1109785584 (http://Link_disabled_to_prevent_accidental_clicking/)

Link looks more convincing than most and the site looks VERY authentic, so be careful out there folks :)

[emeyedeejay]

Good grief - I've just been through those pages and I tell you what - that is an amazing piece of phishing work - scum!

[edmondo]

Wow, that is very crafty. How'd they manage to get a DNS redirection for .com.flagged.info? :?:

Edit: also, why is the page (look at the source) located on a Nelly Furtado fan site!? here (http://www.burninthespotlight.com), fake PayPal site is at http://www.burninthespotlight.com/firefox_plugin/.../index.html (http://noaccidentalclicking)

[Grandmaster]

The best one I've seen recently was a usual payment receipt come through on the email, which had a 'dispute payment' button at the bottom. So you think you've just paid $300 for a watch (what is the scammer's new obsession with watches?!) and you press the button to dispute the payment which scams you for your username and password there and then.

[danielsesay]

Quite frankly the give away is here:

"Your account has been randomly flagged in our system as a part of our routine security measures."

Also...

"We require all flagged accounts to verify their information on file with us."

Why would an online company need you to verify your account details they already hold? Surely they'd know your details anyway from when you first joined. :cuckoo:

But you're right it is crafty and others may fall for it.

[CrowHitsJet]

http://survey.mailfrontier.com/survey/quiztest.html

[splobber]

moving...

[dbilsborough]

never trust an email about security that has a ! anywhere in it ;)

[homerjhandley]

to report these things to ebay click HERE (http://www.whyyoulittle.co.uk/forum/ebay.htm)

:thumbs:

[slinky]

I've supplied them with my atm pin number, hope thats ok. :thumbs: Cos its definately needed to check my paypal ebay or whatever account.

[SimonI]

Don't forget the most important and simple rule: eBay and PayPal only ever address you by your user name :thumbs:

[AdsterUK]

"Dear PayPal Member" = scam
similarly:
"Dear XXXXX@XXXX.com" = scam


The best one I've ever seen was a faked question email in reponse to an item I was actually selling. They had my item correct, a legitimate question to ask me and a flawlessly composed email that was word and layout perfect matching a genuine one. The respond button however took you to a fake ebay login.

[emeyedeejay]

This page is still up - surely they can eb taken down fairly quickly one they are reported?

(Not that I reported it :nuts: )

[Nebiroth]

It's easier than that; all these places don't email you asking for your account details period.

If the phish is a PayPal one, then you should report it directly to PayPal themselves, just forward the dodgy email to spoof@paypal.com

[Squirrel God]

Surprised no one has mentioned the fact that "Information" is spelt with a capital I two out of three times...

[Ferdy147]

"Dear PayPal Member" = scam
similarly:
"Dear XXXXX@XXXX.com" = scam


The best one I've ever seen was a faked question email in reponse to an item I was actually selling. They had my item correct, a legitimate question to ask me and a flawlessly composed email that was word and layout perfect matching a genuine one. The respond button however took you to a fake ebay login.

I fell for that but realised straight away and quickly changed my details!

[Blenky]

The best one I've seen recently was a usual payment receipt come through on the email, which had a 'dispute payment' button at the bottom. So you think you've just paid $300 for a watch (what is the scammer's new obsession with watches?!) and you press the button to dispute the payment which scams you for your username and password there and then.

The best one I got very nearly had me. It was a VERY genuine automatic email informing me I had just received a Paypal payment of about £12. The email all the scam warnings (even down to advising me to key in Paypals web address and not follow an email link!). The amount was not large but I was intetrested to see who had mistakenly sent me money, and I very nealy used the email link to log on!!

Closest I've ever been to being caught out. Every other scam email I've had has always alerted me by its clumsy use of English.