A Fight Identity Theft visitor recently forwarded us a copy of the Pay Pal scam email below. We were able to track down where the scam site was hosted and have it shut down within about 5 minutes. We also located where the stolen information was being sent from the web site and notified PayPal to make sure they shut down that site and contacted any affected customers.

What To Do if You Receive an Email Like This

• DO NOT respond to the email or enter any personal information. If you've already entered information, quickly go to our How to Report a Scam [1] page.

• Forward the email to spoof@paypal.com. PayPal will immediately work to shut down the scam site.

• Forward the email to spam@uce.gov. The U.S. Federal Trade Commission (FTC) will place your email in a database and use the combined information to track down and prosecute the scammer/spammers.

This kind of scam has been around for a long time. The scammers send an email to you telling you there's a problem with your PayPal account and that you need to login to correct it. Here's what the email looks like.

Once you look it over, go on to see what the fake PayPal web site looks like [2]:

Important Note: Here's where the scammers get tricky. The link text says https://www.paypal.com/cgi-bin/webscr/?cmd=_login-run [3]. It looks legitimate. It looks like you will be sent to the secure PayPal site. But you won't.

Click this link - https://www.paypal.com/cgi-bin/webscr/?cmd=_login-run [4]

Oops! We're not in Kansas anymore Toto. Very important point. The text of a link can say anything. Where it points to can be completely different. Don't pay any attention to the link text. You have to pay attention to the address bar in your browser (see our test on our Scams and Fraud homepage [5]).

Also see an email version [6] | How to report a scam [1]

Here is the text from the Paypal page:

Dear Paypal User, Today we had some trouble with one of our computer systems. While the trouble appears to be minor, we are not taking any chances. We decided to take the troubled system offline and replace it with a new system. Unfortunately this caused us to lose some member data. Please follow the link below and log into your account to make sure your information is not affected. Account balances have not been affected. Because of the inconvenience this causes we are giving all users that repair their missing data their next two incoming transfers for free! You will pay no fees for your next two incoming transfers*. https://www.paypal.com/cgi-bin/webscr/?cmd=_login-run [3] Thank you for using PayPal! * - If fees would normally apply, you will not pay anything for the next two incoming transfers you receive. PayPal Security PROTECT YOUR PASSWORD NEVER give your password to anyone and ONLY log in at PayPal's website. If anyone asks for your password, please follow the Security Tips instructions on the PayPal website.

Email this page

Tell a friend about Fight Identity Theft. Just enter the information below and we'll send them a link to this page.

NOTE: Nothing will ever be sent to your friend except for this message.

Your Email: *

Your Name: *

Send To: *

Enter multiple addresses on separate lines or separate them with commas.

Message Subject: (Your Name) has sent you a page from Fight Identity Theft

Message Body: (Your Name) has sent you a link to a page on Fight Identity Theft.

Your Personal Message: *