Phishing email from "Pay Pal"

[Drdogface]

I'm usually pretty good at spotting these phishing things but this one alarmed me. It said that I had just PAID $493.39 to someone I'd never heard of just yesterday. I usually tie PP to my Visa card for such large purchases but this one said it was from my bank. I use the bank link only for small stuff....

Unfortunately I did click on a few hot links in the email and was always taken to the same page which just said "Web Site and had a few Cyrillic looking letter after that. I called my bank and they looked to see if anything came thru...nothing. My PP history does not show this either so not sure what to do next but wait. Now that I've notified my bank, if it does come in and they pay it I would hope I could get them to refund but just to be sure I'll put all that in writing and take it there

Any other steps I should take ?

[craigster59]

I recieved the same one this A.M. Didn't click on any links, just deleted. Was going to check my PP account, but in the body of the e mail it stated "Please note that it may take a little while for this payment to appear in the Recent Activity list on your Account Overview." so I figured scam.

[krystar]

spyware/virus scan your computer. sometimes they're not after your password. the website link might have installed something

[Drdogface]

Thanks guys

[JJ 911SC]

Originally Posted by krystar

... the website link might have installed something

To track your Password(s)

[Head416]

Anytime you're not sure about an email, rather than clicking on the link in the email, open a browser window and type in the site you want to go to, like "paypal.com". It is ridiculously easy to call a link one thing, but have it send you somewhere else.

FAKE LINK EXAMPLE: Login to PayPal Account
(it won't hurt you)

This won't guarantee your safety but it will usually protect you unless your computer has already been infected by something.

[JJ 911SC]

Originally Posted by Head416

Anytime you're not sure about an email, rather than clicking on the link in the email, open a browser window and type in the site you want to go to, like "paypal.com". It is ridiculously easy to call a link one thing, but have it send you somewhere else.

FAKE LINK EXAMPLE: Login to PayPal Account
(it won't hurt you)

This won't guarantee your safety but it will usually protect you unless your computer has already been infected by something.

Actually, if you hover your mouse over the link you will see (bottom left of your screen) the real address, in this case "www.porscheclub.com"

[Drdogface]

Not sure I know how to track a password....change it, yes, of course but not track it ??

[JJ 911SC]

Originally Posted by Drdogface

Not sure I know how to track a password....change it, yes, of course but not track it ??

No no, the "malware" may have put a program in your computer to "steal" your passwords.

Run something like Norton 360 and you'll be OK

Malware - Wikipedia, the free encyclopedia

[NY65912]

Run Malwarebytes, get it free at Cnet.com

I get them at report it to PP then delete.

NEVER click on a link.

[john70t]

Here's one example:
The link in the email will direct you to a fake PayPal log-in page. An exact copy of the real thing. After you type in your info, there will be a "Error- try again later" message. Then they have your password, and immediately start transferring the rest of your balance via Western Union.

Here's another:
The link in the email downloads a self-installing keystroke logger, virus, other
or
It uses java script to change a bookmark to redirect to a malicious webpage.

I've gotten tons of spam emails from PayPal, DHS, IRS, FedEx, UPS, etc telling me to open the attachment now. E-cards (supposedly sent by friends) is another technique.

[djantlive]

if they install a spyware, shouldn't your pc flag and block it? mine does.

[Baz]

I got 4 PP emails in a row Sunday before last within' 3 minutes notifying me that I had created a shipping label using PP shipping with US postal service.

Then I checked my PP account and there they were.....4 transactions - all between $50 and $100 but they were paid with my CC on file - not my bank account (which is my default).

I called my CC company and they cancelled the transactions, cancelled that CC, and re-issued me a new one. I've made several attempts to report this to PP but their help center is a mess.

I'll probably send them a postcard when I get around to it. Maybe they will wise up when they see their 4 transactions aren't going to get paid

And I did change my PP password - logged in from a separate browser window...

[teenerted1]

just close out all the account you use with paypal. then restart them the next time you need paypal

[Head416]

Originally Posted by Baz

And I did change my PP password - logged in from a separate browser window...

If there's a key logger on your computer using a different browser window won't help. I would run MalwareBytes and change my password from a different PC.

[john70t]

Originally Posted by Baz

I called my CC company and they cancelled the transactions, cancelled that CC, and re-issued me a new one. I've made several attempts to report this to PP but their help center is a mess.

Might want to call the PD and get a report # for future reference.
wiki: "In Florida, grand larceny is defined as larceny of property, goods, or services of $300 value or more."

Not sure if this falls under interstate or international laws though

[Baz]

Aaron and John, Thanks for the suggestions! Everything is OK now - I just got off the phone with PP. What a clusterfark though to get through to a live person. Once you do - Bingo - problem resolved in one minute.

This stuff usually doesn't happen to me but it seems like more and more turkeys are figuring out ways to grab your info these days.

BTW - I have Firefox as my browser and Avast anti-virus/spyware software. They do a good job for me.....this situation was on PP's end of things - not mine.