another paypal scam..beware..

Discussion in 'General Mac Discussion' started by asif786, Aug 8, 2005.

  1. asif786 macrumors 65816

    asif786

    Joined:
    Jun 17, 2004
    Location:
    London, UK.
    #1
    hey guys,

    so i was just checking my my mail today, and i got this email from paypal. this is honestly the best spoof email i've ever seen..

    so i clicked it, and went to the website. i could tell it was iffy because it went to the IP address as opposed to the PayPal site. anyway, everything on the page is paypal like. All that's different is the address that the form posts to..which means they get your details.

    Anyway, I thought I'd post a screen cap of the email so you know if you get it. notice how the link in the email shows one place, but when you look in the status bar, it's taking you somewhere else.

    just fyi..(i know there's been threads about these before, but i've not seen this one before..)
    asif
     

    Attached Files:

  2. ham_man macrumors 68020

    ham_man

    Joined:
    Jan 21, 2005
    #2
    After recieving my fair share of Paypal emails, I have learned that they never, ever refer to you as anything but your registered name. I have also learned that they have about 3 paragraphs of discaimers at the bottom and multiple images imbedded in the email...
     
  3. Applespider macrumors G4

    Applespider

    Joined:
    Jan 20, 2004
    Location:
    looking through rose-tinted spectacles...
    #3
    And they tend to make sure that their emails are grammatically correct and use the correct spellings.

    There are a few hints in there that something's wrong.
     
  4. Vader macrumors 65816

    Vader

    Joined:
    Oct 11, 2004
    Location:
    St. Louis, MO
    #4
    I got one recently too.
     

    Attached Files:

  5. grapes911 Moderator emeritus

    grapes911

    Joined:
    Jul 28, 2003
    Location:
    Citizens Bank Park
    #5
    Right after I sold a Power Mac and used PayPal, I received an email very similar to this. I wasn't sure what to do so I emailed PayPal and they told they did not send out the email. I couldn't believe that I was almost fooled.
     
  6. Cooknn macrumors 68020

    Cooknn

    Joined:
    Aug 23, 2003
    Location:
    Fort Myers, FL
    #6
    You didn't log in did you?!
     
  7. Mitthrawnuruodo Moderator emeritus

    Mitthrawnuruodo

    Joined:
    Mar 10, 2004
    Location:
    Bergen, Norway
    #7
    Haven't seen any PayPal schemes, but just received the attached one, claiming to be from ebay.

    Two problems though, I don't have an ebay account and the mail is sent from Uruguay... :rolleyes:
    Code:
    $ whois 201.239.92.143
    
    OrgName:    Latin American and Caribbean IP address Regional Registry
    OrgID:      LACNIC
    Address:    Potosi 1517
    City:       Montevideo
    StateProv:
    PostalCode: 11500
    Country:    UY
    
    ReferralServer: whois://whois.lacnic.net
    
    NetRange:   201.0.0.0 - 201.255.255.255
    CIDR:       201.0.0.0/8
    NetName:    LACNIC-201
    NetHandle:  NET-201-0-0-0-1
    Parent:
    NetType:    Allocated to LACNIC
    NameServer: NS.LACNIC.NET
    NameServer: NS2.DNS.BR
    NameServer: TINNIE.ARIN.NET
    NameServer: NS-SEC.RIPE.NET
    NameServer: SEC3.APNIC.NET
    Comment:    This IP address range is under LACNIC responsibility
    Comment:    for further allocations to users in LACNIC region.
    Comment:    Please see http://www.lacnic.net/ for further details,
    Comment:    or check the WHOIS server located at whois.lacnic.net
    RegDate:    2003-04-03
    Updated:    2004-03-18
    
    OrgTechHandle: LACNIC-ARIN
    OrgTechName:   LACNIC Whois Info
    OrgTechPhone:  (+55) 11 5509-3522
    OrgTechEmail:  whois-contact@lacnic.net
    
    # ARIN WHOIS database, last updated 2005-08-07 19:10
    # Enter ? for additional hints on searching ARIN's WHOIS database.
    
    % Copyright LACNIC lacnic.net
    %  The data below is provided for information purposes
    %  and to assist persons in obtaining information about or
    %  related to AS and IP numbers registrations
    %  By submitting a whois query, you agree to use this data
    %  only for lawful purposes.
    %  2005-08-08 16:21:45 (BRT -03:00)
    
    inetnum:     201.239.0/17
    status:      allocated
    owner:       VTR BANDA ANCHA S.A.
    ownerid:     CL-VPNS-LACNIC
    responsible: Italo Sambuceti
    address:     Reyes Lavalle, 3340, 4th floor
    address:     6760335 - Santiago -
    country:     CL
    phone:       +56 02 3101502 []
    owner-c:     ISO
    tech-c:      ISO
    created:     20050311
    changed:     20050311
    
    nic-hdl:     ISO
    person:      Italo Sambuceti Oyarz?n
    e-mail:      isambuce@VTR.CL
    address:     Reyes Lavalle, 3340, 4 th floor
    address:     676-0335 - Santiago -
    country:     CL
    phone:       +56 02 3101609 []
    created:     20020906
    changed:     20021122
    
    % whois.lacnic.net accepts only direct match queries.
    % Types of queries are: POCs, ownerid, CIDR blocks, IP
    % and AS numbers.
    
    $ 
     

    Attached Files:

  8. CanadaRAM macrumors G5

    CanadaRAM

    Joined:
    Oct 11, 2004
    Location:
    On the Left Coast - Victoria BC Canada
    #8
    That would be UruguayBay, then, would it?
     
  9. mkrishnan Moderator emeritus

    mkrishnan

    Joined:
    Jan 9, 2004
    Location:
    Grand Rapids, MI, USA
    #9
    Dear Sir,

    I notice two major problems with your request.

    1) I am not your Pal.
    2) I will not Pay you.

    Thank you for your understanding.
     
  10. asif786 thread starter macrumors 65816

    asif786

    Joined:
    Jun 17, 2004
    Location:
    London, UK.
    #10
    no, thank god! if it wasn't for the IP address sticking out like a sore thumb, i would've logged in though..seriously. i need to be more conscious of these scams now i think..

    it's sad that things like this happen...i wonder how these kinds of people sleep at night after conning innocent people out of their money..it's so shameful..
     
  11. Mitthrawnuruodo Moderator emeritus

    Mitthrawnuruodo

    Joined:
    Mar 10, 2004
    Location:
    Bergen, Norway
    #11
    uBay? :D

    Somehow, I suspect that the senders address is spoofed and that the South American (Chilean?) ISP who owns the IP address couldn't care less about a complaint from Norway.

    I think the e-mail is better for a laugh and a small training session for the Junk filter in Mail... ;)
     
  12. FoxyKaye macrumors 68000

    FoxyKaye

    Joined:
    Jan 23, 2004
    Location:
    San Francisco, Terre d'Ange, Bas Lag, Gallifrey
    #12
    I agree - I have two layers of spam filtering on my email addresses (ISP/GMail and Eudora), so not a lot of stuff ever makes it to my legitimate "In" box. But, once and a great while something like this will make it through, and it really looks convincing. Especially if you're just waking up in the morning and checking email, or it's late at night and you're wrapping up correspondence. I've clicked 'em too, and thankfully Safari and FireFox have warnings for potentially misleading URLs. You're just not thinking about what a URL looks like when you're tired...
     
  13. drison macrumors regular

    drison

    Joined:
    Apr 30, 2005
    Location:
    Chicago
    #13
    I get this garbage all the time. I have a simple rule. I do not trust any email from a company that has my financial information and wants me to click on a link. If they want me to update some information I will be glad to open a new browser, type in the link to the site and login myself. I am especially untrustworthy of paypal and ebay emails. I don't read any of them unless I know I am involved in an auction, for example.

    -Dave
     
  14. PaRaGoNViCtiM macrumors 6502a

    Joined:
    Mar 18, 2005
    Location:
    PA
  15. eva01 macrumors 601

    eva01

    Joined:
    Feb 22, 2005
    Location:
    Gah! Plymouth
    #15
    I have never gotten a paypal email scam :/ I feel unloved
     
  16. clayj macrumors 604

    clayj

    Joined:
    Jan 14, 2005
    Location:
    visiting from downstream
    #16
    I'd be happy to forward one to you if you like. :p
     
  17. PaRaGoNViCtiM macrumors 6502a

    Joined:
    Mar 18, 2005
    Location:
    PA
    #17
    Yea, me too!
     

Share This Page