Burned by PayPal spoof

[Rocky Raab]

Months ago, I got what appeared to be a email from PayPal asking me to confirm my password there.

I may have done so (can't recall for sure) and have since learned that such requests are all scams. Well, nothing happened - until yesterday.

My account was charged over a thousand dollars in two fake purchases, and since my PayPal account didn't have that much in it, PayPal automatically took the money from my checking account! Now THAT's overdrawn and I have bills to pay!

I immediately filed a claim at PayPal, and they have frozen the account. They are investigating. The transactions will prove to be bogus, I'm sure. But in the meantime, my checking account is fried, and I can't freeze that or it's frozen for everything, not just PayPal.

What worries me is that the two purchases were to people in England. Getting money back in cases like that can be problematic, I've heard.

Moral: don't fall for any PayPal or eBay message that asks you for anything!

[LoneWolf]

Its not just PayPal, Rocky.
I constantly get them from banks, telling me they need to udate their files. I don't give any info out financially when asked from an email. You want to know info you should already have... send me a letter.

[tooldummy]

I've gotten 3 or 4 requests for Pay Pal info in the last year. I forward them to spoof@paypal.com and in every instance they have gotten back to me and it was a phony. And Rocky's right, they looked legitimate.

Anytime you get a corespondence like that, don't even open it. Go to the pay pal website and log in and see if they have sent you anything there. They warn you that is the way they communicate with you, not by E-mail. Other than reciepts for payment.

I got 2 of the E-mails thanking me for recent purchases, but they thought they were suspicious and asking me for info. Both were hoaxes also. One was for a red dress of some kind. Have you ever seen the commercial where the people were identity theft victims. If you could see me in a red dress, I think you would agree this would be an excellent example!

Sorry it happened to you Rocky.

[larryours]

Just got a local e-mail not to call or respond to any 809 area code , NEVER dial area code 809,284, and 876, if you call from the US you will apparently be chaarged $2,425 per-minute.
Scam is to return their call, refernce some family member being ill, someone arrested, died, or to let you know you've won a wonderful prize. They will keep you on the line to run up charges, as much as $ 24,100. Since 809 is located in the British Virgin Islands( The Bahamas) you will be dealing with a foreign company, your local and long distance carrier will not get involved, and it will be a real nightmare.
I'm passing this along for everyone's benifit !

[Rocky Raab]

Yup, I just got another one! This one from a bank where I don't have an account.

If you get one that purports to be from eBay or PayPal, just forward the email unopened to either spoof@ebay.com or spoof@paypal.com

I don't know what you'd do for one of these phishing scams from a bank, but erhaps they have email accounts you could forward them to, also.

[larryours]

I was just telling a friend about this and he said he had got burnt twice in the past month, for $76.00 each time, from a Telecom in Italy

[Brithunter]

Sorry to hear of this Rocky the payment may have gone to England but it's already headed out to Nigeria or some such African state. Why Mr Blair and his cronies insist we need those scum here is beyond the normal persons understanding, but he says they helps us. yeah right

[gumpokc]

Yup there's alot of scams and phishing going on, has been for years.

simple rule of thumb, if you do not know who it is, or even if you do know who it is, but they are askign for information by email:

go to their website (do not click a link) and correspond there with them.

some of the current crop going around are:

citibank, wells fargo, chase bank, suntrust, U.S. bank, IRS, FDIC, ebay, paypal, Federal credit union, best buy, earthlink, 1-800-flowers, send money now, and even Visa, Mastercard, and american express.

It's alot easier to spot them if you learn to read an emails header, couple that was any decent web info software (i use "sam spade" from blightly design) and it's not hard to spot them at all.

[Skyline]

I get these all the time as well......banks, eBay, PayPal.......you name it.

Personally I think it should be a hanging offense....you know on TV in the town square. I think it might slow it down a bit.

[jon lynn]

I closed my e-bay and paypal account two years ago, I still get pay-pal notices almost bi-weekly. And I get the notice: You account must be verified, please supply information. I lived with an old army buddy in Texas before I came back to Germany, he is an IP-server-programer. He fights hackers and scammers on levils that would melt our PC's. He said the scams are getting harder and harder to detect, the fakes are getting as good as the real ones. Since he can actually read all the X's and O's (like on Matrix), he can get to the root of it, but we as regular surfers, are basicly shafted.

I know it is a crock, but the European laws are iffy at best on telephone and internet scams. For example in the Netherlands, scams are common place, they send thousands of letters to every Tom, Dick and Harry outside the kingdom. I saw a news show, a German version of 20/20, they called the scammers, pretending to be dumb, and they were all cheerful, "Why yes Mr.Balh-blah, you are the offical winner of the secret Euro Drawing! We have a check for you right here for €100,000.00!

And each EC country has different laws for everything. The expensive phone scam is perfectly legal in Germany, because at the time their was no need to change any laws, and the criminals know the loop-holes and the fact that the laws are too old to keep up with todays technoligy.

I have a friend here who is a lawyer (no, really he is okay ), but I showed him a letter I got from some scam in Spain, it read something like this:

Dear Mr Lynn,
You have won €1000,748.00 in a secret lottery, please keep this win confidential until we announce you as the winner. Please fill out the attached form, and we shall deposit the money in your account.
You must return 10% of the prize to our office for taxes, and handeling-transfer fee.................................more mumbo-jumbo......


But my friend Lionel Hutz, said the scam is if you sign the form and send it in as a joke, by EC law you have to pay the 10%. He said it is likely they would say their was an error, and you have won €100, but did sign an agreement to pay the handeling of the much larger sum, minus the €100 you actually did win

AND IT IS ALL LEGAL.

My wifes cousin was summering for a German lawyer, who in his free time surfed the net seeking persons making purchases on e-bay. He actually got a German woman I work with at the PX. She bought a StarWars III online from e-Bay USA, when she got the DVD she got a letter from a lawyer who has the ability to brouse e-bay somehow, but any way he sued her for €750 (about 900 bucks) for purchasing a foregin DVD, and posessing it in a country, where 20th Century Fox had not at the time established conditions of relase for Germany.

The lawyer gets to keep all the money, the German government, nor 20-C-Fox gets a cent of this. Some acient German law says a German lawyer can sue an individual for minor violations, on the spot. Back in 2748B .C. (or when ever) the lawyers had to pay tarrifs to the kingdom they were in. But the thousand year law still stands, but the lawyer doesnt have to pay anything to the state, because THAT was changed after WWII.

[TreeDoc]

Too much!

I see this frequently, sorry you got nailed, Rocky! I just received the PayPal one a few days ago. They use the backdrop of what appears to be a legitimate PayPal notice but I NEVER pay attention to them and I do send them to "spoof" The one I just got was asking me to confirm my password but not 2 inches from the body of the letter over on the right margin was PayPal's traditional warning that "PayPal will never ask for your password!"

Also, always look at the email address. This one was from something like paypal@intl.paypal something-something. It just didn't look right.

[Rocky Raab]

Another thing I've learned is that the spoof emails all start "Dear PayPal member" (or eBay) or "Dear card holder" or some such. They don't use your account name because they don't really know what it is unless and until you reply to the spoofmail.

At some point in time I must have fallen for it, but I don't remember when.

This morning, they reversed one of the transactions and refunded my money. I'm still waiting on the other one, but I have every hope of getting that back, too.

I'll still be out the check overdraft fee (I think) and the cost of all new checks and stuff, plus I'll have to change all my other online accounts to the new checking account AND change every stinking password I have everywhere, just to be safe.

[fabsroman]

Yep, I almost fell for one from "Wachovia". The initial webpage looked just like the Wachovia home page, but I got a little suspicious and clicked on one of the links without trying to log in, and there was nothing there. Tried another link, and there was nothing there. So, you can bet that I didn't log in to see this "important message" waiting for me.

I received something from PayPal a couple of days ago, just like TD. However, I do not have a PayPal account, so I knew it was fishy. I have received others from other banks that I do not deal with, but again, I know those are fake because I have nothing to do with those banks.

Wachovia got wind of the scam, and they put a huge warning on their homepage and they also sent out e-mails saying that they will never ask for any log in information via e-mail or ask for any personal information via e-mail.

As far as fraud is concerned, I got hit for about $60 in credit card fraud last month. I am pretty detail oriented, so I keep track of everything we buy. I noticed one charge for a little over $3 on our credit card statement that I had no record of. Went to the website shown on the credit card statement and it was for a weight loss drug. For $3 I wasn't going to say anything, but 2 weeks later there was another charge to the same place for $55. At that time, I called my credit card company and they cut off my credit card and issued me a new one. Of course, I had a bunch of automatic payments scheduled on that credit card, so it was a pain in the rear.

[skeeter@ccia.com]

A few years ago I ran an internet store. I was just getting things going well when the hacking etc hit me from India, Germany, England and Japan. It got to be such a chore for my computer security I just had to close it down. The laws only applied to the United States as far as able to do anything about it. Credit card information etc etc is what they were after so it was best to protect all and close down....I had to deal with a nephew that had his computer run from my mothers phone number. It turned out she got charges of quite a sum of money from foreign numbers that things were routed to and again there was nothing I could do about outside USA scams so I just refused to pay and have heard nothing more about it. I figured if they wanted the money that bad they would have to come see me in person.

[tooldummy]

Hey Rocky, I was just thinking. I'm pretty sure there was something on my homeowners insurance policy that covered fraud like happened to you. I'm not 100% sure, but it wouldn't hurt to check and see. I think I'll call my agent and ask, now I'm wondering.