paypal@e.paypal.co.uk.....phishing warning

-TangleFoot-

the-siren wrote: »

Is the email definitely legitimate, because the one I received says that I "recently paid for something with a guest account"?

Perhaps somebody mistyped their email address? Apparently it's a feature provided by merchants who want to give people the option of paying for stuff without having to sign up for a PayPal account.

earthstorm

I always report these to spoof@paypal.com as i got one , the links show the genuine paypal site, but the email this was sent to was an email not associated with my paypal or even ebay account. their were 2 IP in the email header 1 was from Taiwan and the other China

Cycrow

the-siren wrote: »

Hi everyone,

I just this moment received an email from the same domain mentioned above - ie, [EMAIL="paypal@e.paypal.co.uk"]paypal@e.paypal.co.uk[/EMAIL]. Is the email definitely legitimate, because the one I received says that I "recently paid for something with a guest account"? I did set up an account with Paypal last year but have *never* used it or a 'guest account', and am now very concerned.

That address seems legitimate, but you need to check where the email actually came from.

its not difficult to set the from address as something legitimate but actually send it from somewhere else.

If u've never used paypal, i assume you havn't put any bank details in ?
which case, there really is nothing to be worried about

Clark_Gwent

I have never used PayPal and have received this also. Phishy!

esuhl

UsernameAlreadyExists wrote: »

e.paypal.co.uk

the "e" is a subdomain of the legitimate site.
How can it be a scam?
(unless that's not the actual address it was sent from, of course)

Cycrow wrote: »

its not difficult to set the from address as something legitimate but actually send it from somewhere else.

It's as easy as hand-writing a letter and putting someone else's address at the top. There are no checks made to confirm the validity of the "from" field. By design, the email system allows you to put anything you like there.

I often send emails from the user account LongUserName123@gmx.com, but in the "from" field I put MyName@MyDomain.co.uk. (Obviously I can accept email there too, otherwise I'd never get any replies!)

Happygreen

Better safe than sorry. I had one of these emails today and noted the difference in the address (e.) from receipts for transactions. I checked my inbox and all of the paypal emails that tell me to view monthly transactions or confirm bank details have the e, receipts don't. It is probably legit but I NEVER use the link to log into my account (just in case).

ChrisGUK

I recently received an email from paypal@e.paypal.co.uk, addressing me by my full name, saying "Xxxxx, you've just received an eCheque".

I was suspicious because I knew that I hadn't received an eCheque. I logged into my account using a browser bookmark and double checked. No eCheque.

The email looks legitimate, but the fact that I hadn't received an eCheque made me suspicious, so I forwarded it to spoof@paypal.co.uk - I never received a reply.

The domain e.paypal.co.uk is NOT a cause for concern. "e" is a sub-domain of paypal.co.uk and could only be owned by paypal.co.uk - if that is really where the email came from, it cannot be spoofed.

Most email clients provide a way to look at the raw email data. In Gmail, you click on the downward arrow at the right hand side of the email and select "Show original". You can then see everything there is to know about the email. This one was genuine. A reverse IP lookup showed that it came from PayPal's HQ in Burlington, Massachusetts.

My conclusion is that either this email was sent by PayPal as a result of some kind of error, or that PayPal was somehow compromised, although I doubt that because the email contained no malicious content. Most likely this was just a mistake.

I know a lot about emails and domain names, but this one confused the hell out of me. I don't know how normal people are supposed to know the difference between genuine and malicious emails. You just need to be very, very careful. Always be on your guard with financial emails. Never take anything at face value, and don't log into accounts after clicking on links in an email.

rockin_plumber

earthstorm wrote: »

I always report these to spoof@paypal.com as i got one......

I made the mistake of doing this with an email I had....


BIG MISTAKE! this triggered a suspicious activity and made them limit my account, even though all I did with the email was forward it to them.


Then I had to jump through hoops to get my account working...
Change my password to something even I will never remember...
Change my security question...
Confirm my identity....


Next time the email will just get deleted!

Salfa

This also happened to me; I read the responses below which said it was probably OK, but the email went to an address which isn't the one connected to my PayPal account so I don't trust it.

forgotmyname

Use a unique email address for ebay and another one for paypal.