Thursday, July 30, 2009

Warning - New paypal spoof email

When running paypal buttons on your site, you will occasionally receive a spoof mail from somebody who is going to try to access your account.

Today I received a new PayPal spoof email, here it is:

---------- Forwarded message ----------
From: service <srvt@webssl.com>
Date: 2009/7/30
Subject: New Message
To:


We regret to inform you that
access to your account has been temporarily limited.

This has been done due to several failed log-in attempts.

To restore your account please log in correctly.

If you fail to log in correctly your account will be suspended for fraud prevention.

You will be able to register again for PayPaI only after you authenticate your profile.

We apologize for the inconvenience, this measure was taken for your protection.

PayPaI Security Team


This is the worst case of spoofing I have ever seen, but unfortunately it probably worked. How to identify that this is a spoof email:

1. PayPal never sends out information asking for your login, password or credit card information.
2. The senders email address
3. Look at the url the website directs you to (http://www.tcpsearch.com/_cv/www.paypal.com/sign-on/") not a paypal url.

If you think you received an email that is a spoof, send it to spoof@gmail.com.

No comments:

Post a Comment