March 06, 2003

Paypal customers target of apparent scam

E-mail appears to come from 'info@paypal.com'

Another scam that targets online shoppers who use the eBay PayPal Internet payment service is circulating on the Internet, according to reports from those who have received the suspicious e-mail and to messages posted to online discussion groups.

PayPal did not respond to requests for comment.

The e-mail appears to come from "info@paypal.com" and has a subject line that reads "Your PayPal account is Limited." The body of the message reads, in part: "PayPal is currently performing regular maintenance of our security measures. Your account has been randomly selected for this maintenance, and placed on Limited Access status."

Recipients are asked to provide their PayPal account information, credit card number and bank account number using a form in the body of the e-mail message. A button is provided to "log in" to PayPal's site and update the information.

The message is designed to look like it was generated by PayPal, using graphics from the PayPal Web site and similar fonts and colors as legitimate PayPal correspondence. A boilerplate statement about receiving notifications is even supplied at the end of the message, with links to PayPal that allow the recipient to modify their notification preferences.

"It was formatted really nicely. It had the right colors for the PayPal site and there weren't any obvious grammar mistakes," said Karawynn Long, a writer and Web designer in Seattle, who received one of the apparent scam e-mail messages. Long was almost fooled by the message into entering her account information.

"The subject of the e-mail was odd. But it was early in the morning. Pre-coffee," Long said.

Suspicious of being asked for her confidential account information, however, Long used her e-mail program to view the message's HTML (Hypertext Markup Language) source code. That search revealed that information submitted using the form would go to a host server with a domain name ending in .ru, the domain suffix for Russia, according to Long.

"When I viewed the source I could see [the scam], but how many people view the source on their e-mail?" Long said.

Scams targeting PayPal are common, according to Matt Sergeant, senior antispam technologist at MessageLabs in Gloucester, England.

"They were one of the first Internet banks and they have an awful lot of customers," Sergeant said.

That means that spammers who blanket the Internet with millions of scam e-mail messages are likely to catch quite a few PayPal customers in their net, according to Sergeant. Still, this most recent message's professional appearance and careful attention to detail are not the norm, Sergeant said.

"What you have there really is the top tier of intelligence as far as spammers go. Most spammers are pretty stupid and easy to spot," Sergeant said.

Users who receive such an e-mail should contact PayPal to report the scam at https://www.paypal.com/ewf/f=sa_email.

PayPal customers who have been defrauded should report the theft to the U.S. Federal Bureau of Investigation, Sergeant said.

Close

On Twitter now

Applications

Powered by Twitter

On Twitter now

White Paper

D2D Virtual Tape Library Replication Primer

This whitepaper explains the terminology and concepts behind Data Replication technologies and establishes some sizing rules through worked examples. Learn the new paradigm in disaster tolerance—protect data anywhere.

Download now »

White Paper

An Alternative to Virtualization for Datacenter Cost Savings

Server virtualization is a popular option for dealing with mounting datacenter costs. Another equally promising approach is the use of an Application Delivery Controller. Citrix NetScaler provides a low-cost way for organizations to reduce their server count and accrue cost savings from a reduction in space, cooling, power and personnel.

Download now »

White Paper

Why Your Firewall, VPN, and IEEE 802.11i Aren't Enough to Protect Your Network

The emergence of WLANs has created a new breed of security threats to enterprise networks.

Included in HP ProCurve WLAN solutions is security technology that alleviates threats from WLANs through:
* Monitoring wireless activity inside and out of the enterprise
* Classifying WLAN transmissions into harmful and harmless
* Preventing transmissions that pose a security threat to the enterprise network
* Locating participating devices for physical remediation

Download now »

White Paper

Bringing the Edge to the Data Center

Effectively address data protection challenges, implementing solutions that help store and protect business–critical data while cutting costs and improving efficiency and reliability.

Download now »

Sign up to receive Applications Resource Alerts

Subscribe to the Applications Newsletter

Stay informed of the latest news and technologies around application, project and performance management.

White paper

Turn Your IT Department into a Lean Machine

Like any valuable resource, IT is a terrible thing to waste. But by applying the same lean techniques that have been used to streamline manufacturing processes, IT departments can reduce costs, improve performance and better manage resources.

Download now! »

Podcast

Economy Makes Automation a Must-Have Tech for 2009

Stephen Elliot, vice president of strategy for CA's Infrastructure Management and Data Center Automation business unit, explains why difficult economic times drive the need for simplified management capabilities and advanced automation tools.

Listen now! »

White paper

What You Need to Know About Virtual Infrastructure Management - Now

According to a recent study CA conducted with 300 CIOs and top IT executives, 64 percent of respondents say they've already invested in virtualization, and the other 36 percent reported that they plan to invest in virtualization.

Download now! »

Webcast

Leveraging Virtualization and Process Automation

In this video learn about process automation in a virtualized world. How CA and VMware are enabling enterprise datacenter automation.

View now! »
©1994-2009 Infoworld, Inc.