WARNING: probable fraud aimed at PayPal users

[bhoggett]

Notice of possible fraudulent e-mail sent on behalf of PayPal's "PaySecurity".



This was originally posted in the forums, but it seems important enough to merit front page treatment.

Today I received an e-mail apparently from PayPal titled "Dear PayPal Customer" requesting confirmation of various details to comply with security changes they are making.

THIS IS ALMOST CERTAINLY A FRAUDULENT MAIL!

Reason 1: the form is sent directly to your mailbox, not accessed via a secure website at PayPal.

Reason 2: it requires you to enter your ATM PIN number. This should never be divulged to anyone, even the staff at your own bank or credit company. The usual way to verify your card is via a security code printed on the back of the card.

Reason 3: the notification expires today, 31st of May 2003. This is a blatant attempt to scare people into completing the form before they have time to think about it.

DON'T DO IT.

I am sending whatever details I have to PayPal administration, including the code to the mail in question.

[bhoggett]

@KennyR

A bit late to post this now, but I spotted that someone else noticed too.

Paypal scam in New Zealand.

Actually, that looks relatively harmless compared to this one:




(Image resized and cropped, so any inaccuracies are probably due to my processing  :-) )

Everything in the source looks genuine enough except the URL where your data is sent:

http://www.paypal.com@speedgo.port5.com/zzz.php

See? (Actually, you will only see this if you examine the source, as it doesn't show when placing the curson over any links or buttons)