Forum Home
Press F1
 
Thread ID: 115943 2011-02-10 20:55:00 Paypal scam email?? Warning Billy T (70) Press F1
Post ID Timestamp Content User
1176901 2011-02-10 20:55:00 Received this today. Since I have never signed up to use PayPal, I'm picking it is a phishing scam. Info extracted from Mailwasher preview screen.

Reads fairly convincingly I thought, so if it is a scam it might catch a few.

Just thought you'd like to know.

Cheers

Billy 8-{)


X-Apparently-To: xxxxxx.xx@xtra.co.nz via 124.108.96.108; Thu, 10 Feb 2011 12:26:31 -0800
Received-SPF: softfail (mta1000.tnz.mail.aue.yahoo.com: domain of transitioning dep.accounts@paypal.co.nz does not designate 68.99.120.44 as permitted sender)
X-YMailISG: GmO2IyMcZApP0ED27vMRR5QneiY7C2k3d.8QEdNQ1_EOrhiW
8IzGin75SMbQldBERD.uzKvnAhH1VRbp462C1Q8OqKx.Ae6ptV BUi9XSQF3h
.8wOs8tyU995bP3.X9n1hG5w4.8Wi2debI8Pbc9_c2WFcNVEB_ DuOPUv6ry4
6beQ6ff3yg5W6.s86.r8lBn8_fTeXesijmPjn1p7dk3GLJow9P Qgj7tSy8qb
HNDyfVmD5mrX8BlkYWFXksiUQ0dBh90hU_KM2fcuvunewb9zAz 7fgLbukhyD
B0e.7gssQTtuGzsUk8qb6qfoKNiyIylrRaN7w6KAH41PZgkJkr LP86FUFm2j
rwZRO2onfpTsqlRSpSaQ7e_THj8X2tA0dWsnTwpnaU_Ho1Xec_ D1cDqmaSAl
NOg0OZM1G3ZMH2hWJwUaN3JHzSafXdftZ3z55KBvpDq2ygK5K1 3AkK2EY_11
zM.hjoxpe_YcaECgK27MgAWuBM0xdit3JGcNR6AzfzxxPB8BO2 amFXlM4ezE
7ccJl_USZLg0vjyQxLGg8510UyViTDQH2wE7aNtl0liduiIN.u jXp5.l9dQS
wuT4cePkXEbokLvhOj6F5zpTzKlRw9CFtl5LR1i2lW8zcBK0Xk YQCDbQ74ZG
EZTFd1NVDZQhdRNicYg-
X-Originating-IP: [68.99.120.44]
Authentication-Results: mta1000.tnz.mail.aue.yahoo.com from=paypal.co.nz; domainkeys=neutral (no sig); from=paypal.co.nz; dkim=neutral (no sig)
Received: from 68.99.120.44 (EHLO dukecmmtar03.coxmail.com) (68.99.120.44)
by mta1000.tnz.mail.aue.yahoo.com with SMTP; Thu, 10 Feb 2011 12:26:30 -0800
Received: from dukecmimpo01.coxmail.com ([68.99.120.134])
by dukecmmtar03.coxmail.com
(InterMail vM.7.08.02.01 201-2186-121-102-20070209) with ESMTP
id <20110210202618.KQTJ8496.dukecmmtar03.coxmail.com@d ukecmimpo01.coxmail.com>;
Thu, 10 Feb 2011 15:26:18 -0500
Received: from User ([70.178.51.54])
by dukecmimpo01.coxmail.com with bizsmtp
id 6LS81g00C1A9zLe01LS9Tn; Thu, 10 Feb 2011 15:26:18 -0500
From: "PayPal NZ"<dep.accounts@paypal.co.nz>
Subject: Account Notification
Date: Thu, 10 Feb 2011 12:26:18 -0800
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0059_01C2A9A6.66CE0BD6"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <20110210202618.KQTJ8496.dukecmmtar03.coxmail.com@d ukecmimpo01.coxmail.com>

This is a multi-part message in MIME format.

------=_NextPart_000_0059_01C2A9A6.66CE0BD6
Content-Type: text/plain;
charset="koi8-u"
Content-Transfer-Encoding: 7bit

test 34652362364 2 ywrysfhsdf8 88u
------=_NextPart_000_0059_01C2A9A6.66CE0BD6
Content-Type: text/html;
charset="koi8-u"
Content-Transfer-Encoding: 7bit

<HTML><HEAD><TITLE></TITLE>
</HEAD>
<BODY bgcolor=#FFFFFF leftmargin=5 topmargin=5 rightmargin=5 bottommargin=5>
<FONT size=2 color=#000000 face="Arial">
<DIV>
Dear Customer, </DIV>
<DIV>
</DIV>
<DIV>
&nbsp; </DIV>
<DIV>
As part of our security measures, we regularly screen activity in the </DIV>
<DIV>
PayPal system. During a recent screening, we noticed an issue regarding </DIV>
<DIV>
your account. </DIV>
<DIV>
</DIV>
<DIV>
&nbsp; </DIV>
<DIV>
<B>We have reason to believe that your account was accessed by a third party</B> </DIV>
<DIV>
<B>and some unauthorized transactions were made.</B> </DIV>
<DIV>
</DIV>
<DIV>
&nbsp; </DIV>
<DIV>
&nbsp; </DIV>
<DIV>
For your protection, we will limit access to your account until </DIV>
<DIV>
additional security measures can be completed. We apologize for any </DIV>
<DIV>
inconvenience this may cause. </DIV>
<DIV>
</DIV>
<DIV>
&nbsp; </DIV>
<DIV>
To review your account and and update some or all of the information that PayPal used </DIV>
<DIV>
to make its decision to limit your account access, please go to the next link : </DIV>
<DIV>
&nbsp; </DIV>
<DIV>
<A href="www.cristal1sgm.org pyorxp4xDjvhNoCpUoV0JW4Vwl9WChkw48dispatch05885d80 a13c0d/cnd_pay.php"><FONT color=#0000FF><U> </DIV> " target="_blank">www.paypal.com
<DIV>
&nbsp; </DIV>
<DIV>
We thank you for your prompt attention to this matter. Please understand </DIV>
<DIV>
that this is a security measure intended to help protect you and your </DIV>
<DIV>
account. We apologize for any inconvenience. </DIV>
<DIV>
</DIV>
<DIV>
&nbsp; </DIV>
<DIV>
Sincerely, </DIV>
<DIV>
</DIV>
<DIV>
&nbsp; </DIV>
<DIV>
PayPal Account Review Department </DIV>
<DIV>
&nbsp; </DIV>
<DIV>
</DIV>
<DIV>
&nbsp; </DIV>
<DIV>
PPID PP11890 </DIV>
<DIV>
&nbsp; </DIV>
</FONT>
</BODY></HTML>

------=_NextPart_000_0059_01C2A9A6.66CE0BD6-- 		Billy T (70)
1176902 2011-02-10 21:04:00 Delete it Speedy Gonzales (78)
1176903 2011-02-10 21:13:00 These have been around for years Billy and come through regularly. Also supposedly from Banks, IRD ISPs etc
Anyone that enters their account details or CC through an email link rather than going to the normal website after all the information and publicity about these things deserve to be scammed.
You only have to click on the link given to see it is not a genuine Paypal site. 		Safari (3993)
1176904 2011-02-10 21:27:00 Yes as Safari said, these emails have been around for years. I just ignore and delete them. I have a paypal account and it still works.
:) 		Trev (427)
1176905 2011-02-10 22:25:00 Normally if there is a problem with my bank account I would expect a typed letter by snail mail, a phone call or a message left in my box when I login to internet banking. I do not expect my bank to email me but if they did I would regard the email with caution and suspicion. Bobh (5192)
1176906 2011-02-10 22:30:00 These have been around for years Billy and come through regularly. Also supposedly from Banks, IRD ISPs etc
Anyone that enters their account details or CC through an email link rather than going to the normal website after all the information and publicity about these things deserve to be scammed.
You only have to click on the link given to see it is not a genuine Paypal site.

I never click on links, and I don't download either so I never get to see the page. I always preview in Mailwasher (text only) and if I don't like what I see, or can't make any connection between the email and myself I just delete it at the server. I have to be careful though, recently I nearly deleted an email that wasn't for me, but linked to a information including a specific type of work I do for hospitals, so I took my finger off the Delete key, followed up and got myself on a list for overseas contracts.

I'll probably earn something between $zilch and $gazillions, most likely the former, but you have to throw your hat into the ring to even get invited to take part in the fight.

Cheers

Billy 8-{) 		Billy T (70)
1