Submit News Contact Us Translate Sign in Join

Paypal Scam

Welcome to the General Discussion area where just about anything goes! This area is designed to discuss all matters and does not necessarily have to be Transformers related. Please keep topics relevant.

Paypal Scam

Postby TM JAF » Wed Nov 02, 2005 7:23 am

The following is a classic Paypal fishing-for-accounts scam. I received it at my address related to TFmaster.com. If anyone receives a paypal message like this DON'T respond. Report it to paypal at:

spoof@paypal.com

Here's the cheezer's email:

In response for your PayPal Inc. account security we have to report that your password may be is compromised. Your account is marked for too many successful logins last week It is more interesting that the hostnames are form different countries:

United States (c-67-160-224-80.client.comcast.net)
Canada (HSE-Toronto-ppp3044429.sympatico.ca)
Sweden (c213-100-93-27.swipnet.se)
Russia (32.122.140.213.telenet.ru)

Your account is limited for security reasons.

Follow the link to make sure you are on a secure PayPal Inc. page and login with currently password.
Please authorize your account information before November 5, 2005.

https://www.paypal.com/us/cgi-bin/webscr?cmd=_login-run

Thank you for using PayPal Inc.
PayPal Inc. Team

Please do not reply to this e-mail. Mail sent to this address cannot be answered. For assistance, log in to your PayPal Inc. account and choose the "Help" link in the header of any page.
"Logic is the ultimate weapon."
TM JAF
Site Owner
Posts: 296
Joined: Tue Sep 14, 2004 4:45 pm
Location: New York

Postby BillyBadAss » Wed Nov 02, 2005 7:26 am

whoa.. Thanks for the heads up!

.billy
Robots make me poor..
BillyBadAss
Mini-Con
Posts: 11
Joined: Mon Mar 12, 2007 1:45 am

Postby Pepie » Wed Nov 02, 2005 7:45 am

I got two of them on different accounts :roll:
Pepie
City Commander
Posts: 3159
Joined: Mon Apr 12, 2004 4:20 am
Location: The Netherlands

Postby MetalSamamon » Wed Nov 02, 2005 4:47 pm

There are a couple easy ways to indentify these...

1. Paypal; like eBay; will never ask for your account info; password change; or other such things in an e-mail. Instead; it would be posted on the main page of their website; or have a link on their main website page to a help fourm/information site; run by them.

2. The link addresses themselves. If it doesn't start with "http://rover.ebay.com/rover/1/711-53200-19255-0/1?ff3=4&pub=5574891718&toolid=10001&campid=5336631220&customid=transformers&mpre=http%3A%2F%2Fwww.ebay.com%2F" or "http://www.paypal.com/"; IT IS NOT REAL!! If you notice in that e-mail that JAF got; the link says "https://"; that extra 's' in there makes all the difference... and that's how they catch people. Anyone can mimic eBay or Paypal; it's not hard; but they can't have the exact same address as them... 8)

Hopefully that helps anyone in the future avoid such scams...

...And I got the e-mail as well. Fortunately; I haven't used my Paypal account yet; and I already knew better... :)

MetalSamamon!
Image
MetalSamamon
Headmaster Jr
Posts: 588
Joined: Sat Apr 09, 2005 1:17 pm
Location: Mt. Pleasant, MI

Postby tintin » Wed Nov 02, 2005 8:44 pm

Heh... I aint logged into m,ine in so long it aint even funny. Last time was to send Rocks_TFs the money for that OpOp and, past that... Well... I aint been back in ages... Heh. 8)
tintin
Mini-Con
Posts: 0
Joined: Mon Dec 10, 2007 5:39 pm

Postby TM Dark_Lord_Prime » Tue Nov 08, 2005 12:20 pm

MetalSamamon wrote:2. The link addresses themselves. If it doesn't start with "http://rover.ebay.com/rover/1/711-53200-19255-0/1?ff3=4&pub=5574891718&toolid=10001&campid=5336631220&customid=transformers&mpre=http%3A%2F%2Fwww.ebay.com%2F" or "http://www.paypal.com/"; IT IS NOT REAL!! If you notice in that e-mail that JAF got; the link says "https://"; that extra 's' in there makes all the difference... and that's how they catch people. Anyone can mimic eBay or Paypal; it's not hard; but they can't have the exact same address as them... 8)

Actually, it's the REAL address that'll have the https:// -- that means it's a secure page. The printed address in the message text can be entirely different from whatever it's actually hyperlinked to (you can hover your mouse over the link to see the real address in your e-mail client's status-bar or, at least, I can in Eudora).

Of course, the EASIEST way to distinguish JAF's e-mail from a real PayPal or eBay correspondence is the severely broken English. ;)
Image
(new sig by Wingus)
TM Dark_Lord_Prime
Combiner
Posts: 453
Joined: Sun Feb 27, 2005 12:09 am
Location: Indiana

Postby Pepie » Tue Nov 08, 2005 12:22 pm

LOL
Was it that bad?
Pepie
City Commander
Posts: 3159
Joined: Mon Apr 12, 2004 4:20 am
Location: The Netherlands

Postby TM Dark_Lord_Prime » Tue Nov 08, 2005 4:30 pm

Pepie wrote:LOL
Was it that bad?


Well, considering it's supposed to be from eBay and/or PayPal, which tends to have pretty good English.... yeah. ;)
Image
(new sig by Wingus)
TM Dark_Lord_Prime
Combiner
Posts: 453
Joined: Sun Feb 27, 2005 12:09 am
Location: Indiana

Postby MetalSamamon » Tue Nov 08, 2005 8:46 pm

Dark_Lord_Prime wrote:
MetalSamamon wrote:2. The link addresses themselves. If it doesn't start with "http://rover.ebay.com/rover/1/711-53200-19255-0/1?ff3=4&pub=5574891718&toolid=10001&campid=5336631220&customid=transformers&mpre=http%3A%2F%2Fwww.ebay.com%2F" or "http://www.paypal.com/"; IT IS NOT REAL!! If you notice in that e-mail that JAF got; the link says "https://"; that extra 's' in there makes all the difference... and that's how they catch people. Anyone can mimic eBay or Paypal; it's not hard; but they can't have the exact same address as them... 8)

Actually, it's the REAL address that'll have the https:// -- that means it's a secure page. The printed address in the message text can be entirely different from whatever it's actually hyperlinked to (you can hover your mouse over the link to see the real address in your e-mail client's status-bar or, at least, I can in Eudora).

Of course, the EASIEST way to distinguish JAF's e-mail from a real PayPal or eBay correspondence is the severely broken English. ;)


Hmm...that's interesting. Every time I reported an e-mail to eBay (which I did several times) they told me to watch out for that specifically. Also, they told me to watch for ones with cgi.ebay.com stuff and aw.confirm...

Oh well; I was only trying to help...

But you are correct about the broken English...you'd think that they would be able to better than that :lol:

L8r!
Image
MetalSamamon
Headmaster Jr
Posts: 588
Joined: Sat Apr 09, 2005 1:17 pm
Location: Mt. Pleasant, MI

Postby TM Dark_Lord_Prime » Tue Nov 08, 2005 11:21 pm

MetalSamamon wrote:Hmm...that's interesting. Every time I reported an e-mail to eBay (which I did several times) they told me to watch out for that specifically. Also, they told me to watch for ones with cgi.ebay.com stuff and aw.confirm...

It probably actually told you to watch out if it wasn't https://

If you go to ebay.com and click on "Sign in", the sign-in page is https:// :)
Image
(new sig by Wingus)
TM Dark_Lord_Prime
Combiner
Posts: 453
Joined: Sun Feb 27, 2005 12:09 am
Location: Indiana

Postby MetalSamamon » Tue Nov 08, 2005 11:25 pm

Dark_Lord_Prime wrote:
MetalSamamon wrote:Hmm...that's interesting. Every time I reported an e-mail to eBay (which I did several times) they told me to watch out for that specifically. Also, they told me to watch for ones with cgi.ebay.com stuff and aw.confirm...

It probably actually told you to watch out if it wasn't https://

If you go to ebay.com and click on "Sign in", the sign-in page is https:// :)


Perhaps...that was a couple of years ago when my dad and I were selling stuff together... :oops:
Image
MetalSamamon
Headmaster Jr
Posts: 588
Joined: Sat Apr 09, 2005 1:17 pm
Location: Mt. Pleasant, MI

Postby Darth Zax » Mon Dec 19, 2005 8:55 am

i got one of them mails and i don't even have a paypal account.
Darth Zax
Godmaster
Posts: 1581
News Credits: 3
Joined: Sun Jun 26, 2005 10:43 am


Return to General Discussion

Transformers Podcast: Twincast / Podcast #96 - Age of Extinction
Twincast / Podcast #96:
"Age of Extinction"
MP3 · iTunes · RSS · View · Discuss · Ask
Posted: Monday, July 7th, 2014