Pls be aware, spoof email from paypal.co.uk

michellen34

Hi,

I just wanted to make everyone aware that a very good spoof email claiming to be from service@paypal.co.uk is going around. Normally it's pretty easy to spot a spoof but i had to ring paypal and ask on this one, its asking you to verify your ID please do not click the link in this email if you have been sent it, i have been informed by paypal that it is a spoof

Premier_2

[EMAIL="service@paypal.co.uk"]service@paypal.co.uk[/EMAIL] is a genuine email address that paypal use.

However, it is extremely easy to spoof a sender's email address ... but much more difficult to spoof the header so a quick look at that should determine whether the sender is genuine or not.

Was this the link?
https://www.paypal.com/cgi-bin/security

See how easy it is to forge that? ... and how easy it is to recognise (if using IE, just hover over the link, or click it if you prefer and see where it takes you :money: )

Widelats

Premier wrote: »

[EMAIL="service@paypal.co.uk"]service@paypal.co.uk[/EMAIL] is a genuine email address that paypal use.

However, it is extremely easy to spoof a sender's email address ... but much more difficult to spoof the header so a quick look at that should determine whether the sender is genuine or not.

Was this the link?
https://www.paypal.com/cgi-bin/security

See how easy it is to forge that? ... and how easy it is to recognise (if using IE, just hover over the link, or click it if you prefer and see where it takes you :money: )

I don't know what you mean by headers or howto look at them.

soolin

Just be warned that paypal confirm everything as a spoof, even legitimate emails from them.

In fact you can report a spoof, get an email back confirming it is a spoof, then send that confirmation email back to them and have that confirmed as a spoof as well.

Premier_2

Widelats wrote: »

I don't know what you mean by headers or howto look at them.

http://www.emailaddressmanager.com/tips/header.html

michellen34

Hiya, This was the link

https://www.paypal.co.uk/uk/webscr.php?cmd=_login-runcmd=_secure

Paypal said it always uses your name and not paypal member etc. I never knew they even comfirmed there own emails as spoof? lol odd?
I had no idea if it was genuine or not, it really seemed it, but you get that worried about any email sent (even the genuine ones) I always check now if it asks me to click a link. I'm also going to check out the header thing as I too have no idea what to look for, thanks for that

soolin

If it asks you to click a link then it is not genuine.

Premier_2

michellen34 wrote: »

Hiya, This was the link

https://www.paypal.co.uk/uk/webscr.php?cmd=_login-runcmd=_secure

Paypal said it always uses your name and not paypal member etc. I never knew they even comfirmed there own emails as spoof? lol odd?
I had no idea if it was genuine or not, it really seemed it, but you get that worried about any email sent (even the genuine ones) I always check now if it asks me to click a link. I'm also going to check out the header thing as I too have no idea what to look for, thanks for that

But can't you see the underlying link points here!

http://equitz.dk/images/im.html




Which then leads to here:

http://w2o.dk/images/uk/cgi-bin/webscr?cmd=_login-run&dispatch=5775d80a13c0db1fb6947b0aeae66fdb089c3508df63c7a0f874fb1ad99a56dc/

(Links disabled in this post)

NotQuiteNorbert

Premier, the top link is still working.

michellen34

I'm not really sure what you mean by link points?, but I won't click any links until i've checked, been burned before being stupid and not knowing, and having a car listed and sold that I didn't even own (and can't drive! lol) thanks Soolin, i won't and don't

durham_girl

michellen34 wrote: »

I'm not really sure what you mean by link points?

If you hover the mouse over the link, then look at the bottom left corner of the browser screen you should see where the link goes to. This works for all links, not just paypal.