PayPal Email Scam - Web Site Version

A Fight Identity Theft visitor recently forwarded us a copy of the Pay Pal scam email below. We were able to track down where the scam site was hosted and have it shut down within about 5 minutes. We also located where the stolen information was being sent from the web site and notified PayPal to make sure they shut down that site and contacted any affected customers.

 You can also keep up-to-date with the latest scams with the scam section of the Fight Identity Theft Blog.

What To Do if You Receive an Email Like This

• DO NOT respond to the email or enter any personal information. If you've already entered information, quickly go to our How to Report a Scam page.
• Forward the email to spoof@paypal.com. PayPal will immediately work to shut down the scam site.
• Forward the email to spam@uce.gov. The U.S. Federal Trade Commission (FTC) will place your email in a database and use the combined information to track down and prosecute the scammer/spammers.

This kind of scam has been around for a long time. The scammers send an email to you telling you there's a problem with your PayPal account and that you need to login to correct it. Here's what the email looks like.

Once you look it over, go on to see what the fake PayPal web site looks like:

Dear PayPal User Today we had some trouble with one of our computer systems. While the trouble appears to be minor, we are not taking any chances. We decided to take the troubled system offline and replace it with a new system. Unfortunately this caused us to lose some member data. Please follow the link below and log into your account to make sure your information is not affected. Account balances have not been affected. Because of the inconvenience this causes we are giving all users that repair their missing data their next two incoming transfers for free! You will pay no fees for your next two incoming transfers*. https://www.paypal.com/cgi-bin/webscr/?cmd=_login-run Thank you for using PayPal! * - If fees would normally apply, you will not pay anything for the next two incoming transfers you receive. PayPal Security PROTECT YOUR PASSWORD NEVER give your password to anyone and ONLY log in at PayPal's website. If anyone asks for your password, please follow the Security Tips instructions on the PayPal website. About Us | Accounts | Fees | Privacy | Security Center | User Agreement | Developers | Referrals | Help Copyright © 2002 PayPal. All rights reserved. Information about FDIC pass-through insurance

Important Note: Here's where the scammers get tricky. The link text says https://www.paypal.com/cgi-bin/webscr/?cmd=_login-run. It looks legitimate. It looks like you will be sent to the secure PayPal site. But you won't.

Click this link - https://www.paypal.com/cgi-bin/webscr/?cmd=_login-run

Oops! We're not in Kansas anymore Toto. Very important point. The text of a link can say anything. Where it points to can be completely different. Don't pay any attention to the link text. You have to pay attention to the address bar in your browser (see our test on our Scams and Fraud homepage).

Also see an email version  |  How to report a scam

 

Special Offers

Prevention

• Prevention Tips - Learn the simple things that will help protect your identity.
• Your Mailbox - Eliminate credit offers and protect your mail.
• Paper Shredders - Learn what to shred. Find a good shredder.
• Scams - Learn how to recognize "phishing" and other common scams.
• Credit Freeze - Is one available in your state?
  
• Fraud Alerts - Take 30 seconds today and place a fraud alert on your credit.

Detection

• Credit Reports - Learn how to spot signs of fraud in your credit report.
• Credit Monitoring - Compare the cost and features of credit report monitoring services.
• The Fact Act Explained - Learn the best way to order your goverment-mandated free credit reports.

Recovery

• Emergency Help - Learn what to do if you believe you are a victim of identity theft.