WARNING ebay and paypal spoof emails

diygardener

Just reported the following to paypal as I believe it to be a phishing attempt. It seems to be extremely sophisticated.

Email states:

Subject: Credit Card Removal PP6282
Dear (my name),
On 3 Aug. 2012, your credit card has been removed from your PayPal account.

Possible reasons for removal:

1. Your credit card has expired.
2. Your credit card has been declined.
3. Your credit card has insufficient funds to cover a recent transaction.

To avoid any interruption to your service, please add a new credit card by following the steps below. If you do not add a card:

• You may no longer be able to send instant PayPal payments.

To add a new credit card, click on the 'Add Card' button below:
Then there is an ADD CARD button that has a link that looks absolutely genuine at first glance since it begins:
.......paypal.co.uk.6282.secure31.mx/image/cgi.bin/uk/.....

The email ends with:
Thank you for using PayPal!
The PayPal Team

How do I know this is not a Spoof email? Spoof or "phishing" emails tend to have generic greetings such as "Dear PayPal member". Emails from PayPal will always address you by your first and last name. Then there's another genuine looking link headed Find out more here
The main thing that alerted me was the fact that this was adressed to a different email address from the one known to paypal. So I cannot see how this can be genuine. So, please be aware.

soolin

That's all you need to see it is a spoof:

To add a new credit card, click on the 'Add Card' button below:

theblagger

another one paypal@e.paypal.co.uk

soolin

I don't think anyone would fall for this obvious phish, but just in case this is the current one doing the rounds again and again

Hi,

What happened? I told you 3 times i don`t the red one. The package was rejected and you will get it back.
I bought this item and this is what i should get::
Item#: 'XXXXXXXX'

Please note that i paid 396£ (+15£) like you told me. If i don`t get the correct item this time then i`ll cancel our deal and i`ll report you.

Thanks,
Laura

soolin

Unless there are any objections I am going to unstick this today as I don't think it is really very useful as the phishing mails change every few minutes- I was htinking more along the lines of tidying up the FAQ thread and adding a link there about scams.

soolin

I'm unpinning this sticky now as I think it is out of date. If anyone does have any concerns about emails they receive, just start a new thread.

Thank you