Here's a spoof I just received. Looks almost like the real thing... (Headers are down at the bottom.)
I sent it on to spoof@paypal. I'm going to warn a few people about it. This one's just too good.
Lucy
Dear valued PayPalŪ member:
It has come to our attention that your PayPalŪ account information needs to be
updated as part of our continuing commitment to protect your account and to
reduce the instance of fraud on our website. If you could please take 5-10 minutes
out of your online experience and update your personal records you will not run into
any future problems with the online service.
However, failure to update your records will result in account suspension.
Please update your records on or before April 5, 2004.
Once you have updated your account records, your PayPalŪ session will not be
interrupted and will continue as normal.
To update your PayPalŪ records click on the following link:
http://www.paypal.com/cgi-bin/webscr?cmd=_login-run
Thank You.
PayPalŪ UPDATE TEAM
Accounts Management As outlined in our User Agreement, PayPalŪ will
periodically send you information about site changes and enhancements.
Visit our Privacy Policy and User Agreement if you have any questions.
http://www.paypal.com/cgi-bin/webscr?cmd=p/gen/ua/policy_privacy-outside
Return-Path: <[email protected]>
Received: from rly-xj03.mx.aol.com (rly-xj03.mail.aol.com [172.20.116.40]) by air-xj02.mail.aol.com (v98.19) with ESMTP id MAILINXJ23-51340703da7b8; Sun, 04 Apr 2004 12:54:30 -0500
Received: from leo.lunarpages.com (leo.lunarpages.com [64.235.234.68]) by rly-xj03.mx.aol.com (v98.5) with ESMTP id MAILRELAYINXJ39-51340703da7b8; Sun, 04 Apr 2004 12:54:00 -0500
Received: from nobody by leo.lunarpages.com with local (Exim 4.24)
id 1BAAt4-0001BC-QZ
for xxx; Sun, 04 Apr 2004 09:54:22 -0700
To: xxx Subject: Verify and update your PayPal information
From: PayPal Support Center <[email protected]>
Reply-To:
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Message-Id: <[email protected]>
Date: Sun, 04 Apr 2004 09:54:22 -0700
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - leo.lunarpages.com
X-AntiAbuse: Original Domain - aol.com
X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12]
X-AntiAbuse: Sender Address Domain - paypal.com
X-AOL-IP: 64.235.234.68
X-AOL-SCOLL-SCORE: 1:XXX:XX
X-AOL-SCOLL-URL_COUNT: 2
posted on April 4, 2004 10:18:59 AM new
When the word "update" shows up 10 words into the email, delete it. That is one of the more obvious phonies I have seen...
posted on April 4, 2004 10:39:00 AM new
You know, I'd never go for one of these and I doubt anyone here would either.
A friend of mine did fall for an eBay one and gave out her info. One morning she discovered all her auctions had been cancelled and she was suspended. Her account had been hijacked by someone in Australia. She said there was over $800 in listing fees on her eBay account, which she pays through a credit card. She wasn't sure the card info had been requested so she cancelled the card, just to be on the safe side.
Fortunately, eBay caught it immediately and refunded the money but it did take a day or two to reinstate her.
posted on April 4, 2004 10:47:04 AM new
"instance" instead of "incidence" --- good tip off as well. But, then again, spelling English words isn't the best - even for those born here and "edumacated" in public schools.
It's really not all our fault though, especially when large billboard signs have spelling errors.
Wayne
Never explain -- Your friends do not need it and your enemies will not believe you anyway.
~ Elbert Hubbard
posted on April 4, 2004 11:53:13 AM new
now paypal has sugar daddy EBAY,they can afford to hire a PAYPAL UPDATE TEAM!!!!!!!
-sig file -------we eat to live,not live to eat.
Benjamin Franklin
posted on April 4, 2004 02:44:40 PM new
Luce, did you want to give out your AOL address? Not too late to edit.
--
--------------------------------------------------------------------------------
Dennis: Come see the violence inherent in the system. Help, help, I'm being repressed.
posted on April 5, 2004 12:25:46 AM new
Rule of thumb answer no email from payypal and if you think it mak be valid go to paypal.com and deal with it from your account page.
I find it hard to believe anyone pays attention to this junk or the numerous Nigerian letters that abound on the internet.
Friends don't let friends vote Republican!
posted on April 6, 2004 06:00:52 AM new
Another way to tell the real thing-Paypal always addresses you by your real name, such as Dear Mrs Jane Doe. I think they mention that in their info and I just had a real one that used my name. The last spoof I got said they noticed my site had been accessed from a foreign location and in case I hadn't been traveling I should give my ATM pin and some other completely unbelievable stuff.
posted on April 6, 2004 09:44:13 AM new
I get these all the time but yesterday I got an email from Vendio about the new gallery feature.
It looked like the real thing but was sent to VENDIO USERS not my email address.
Could this be a real email? Did everyone get it?
Thanks
