***Caution***: Paypal Users

**Mick** · 07-02-2005, 06:40

Those who use Paypal may of been recently sent a suspicious looking email.

The title of this email may say:- 'User agreement has been changed [16532]'

And the beginning of the email starts with:-

Quote:

PayPal has recently made several important changes to our User Agreement and Privacy Policy. Please read the new User Agreement and Privacy Policy, because they contain important information about your PayPal account, your rights as a PayPal user, and the ways in which PayPal will use your personal information.

You may notice that 'several important changes' has been hyperlinked, hovering over this link you will see that it links to an ip address and gallery/items/.1/ proceeds the IP. Other links in the email link to this location.

Warning: Do not click any of the links contained in this email. Please do not enter any personal or financial information into this website. The link(s) in this email are not a registered URL authorized or used by PayPal. Paypal have been notified and have confirmed that such an email was not sent by them and they are currently investigating this incident fully.

For further information regarding the security of your paypal account visit:-

https://www.paypal.com/cgi-bin/websc...curity-outside

Richard M · 07-02-2005, 07:22

I got this email, how the hell did they get an email address that I've never given to anyone?

swoop101 · 07-02-2005, 07:27

I just got one as well, good job I noticed the link address

**Mick** · 07-02-2005, 07:30

Quote:

Originally Posted by Richard M

I got this email, how the hell did they get an email address that I've never given to anyone?

That is actually a very good question.

bob_a_builder · 07-02-2005, 07:38

one I got was dated 1/1/1970 ?

skyblueheroes · 07-02-2005, 07:39

Me too. Trashed it straight away.

Scarlett · 07-02-2005, 07:56

I had one and it might have worked if they had managed to get the dates right I noticed that they we saying that
"until they agree to the new User Agreement, or until January 31, 2005, whichever comes first."

That and fact that the from address is Nobody [nobody@vulcan.cybexhost.com]; on behalf of; [service@paypal.com].

Have they been hacked ?

Scarlett.

etccarmageddon · 07-02-2005, 08:00

I just got it as well - VERY convincing except when you click on the links within the email which go to an IP address and also hang.

Paulie · 07-02-2005, 08:02

I just got one this morning. All i do is forward them to spoof@paypal.co.uk
Weather it helps or not i don`t know.

keithwalton · 07-02-2005, 08:02

I got one too, but again they made a fatal error. They sent it to an e-mail addy that doesnt have a paypal account and not the one that does. hehe
shame the links didnt work as i was going to give them some bogus data

Dave Stones · 07-02-2005, 08:19

got one too...luckily gmail highlighted it in red and said not to open it, so i just deleted it

Russ · 07-02-2005, 08:31

I sent mine to Paypal and they replied as follows....

Quote:

Dear Russ David,

Thank you for contacting PayPal.

Thank you for bringing this suspicious email to our attention. We can
confirm that the email you received was not sent to you by PayPal. The
website linked to this email is not a registered URL authorized or used
by PayPal. We are currently investigating this incident fully. Please do
not enter any personal or financial information into this website.

If you have surrendered any personal or financial information to this
fraudulent website, you should immediately log into your PayPal Account
and change your password and secret question and answer information. Any
compromised financial information should be reported to the appropriate
parties.

If you notice any unauthorized activity associated with your PayPal
transaction history, please immediately report this to PayPal by
following the instructions below:

1. Log in to your account at https://www.paypal.com/ by entering
your email address and password into the Member Log In box

2. Click on the Security Center at the bottom of the page

3. Click on 'Report a Problem'

4. Select the Topic: Report Fraud

5. Select the Subtopic: Unauthorized use of my PayPal Account

6. Enter your question in the 'Summarize your question in one
sentence' box

7. Click Continue

8. Follow the instructions to access the appropriate form

If you have any further questions, please feel free to contact us again.

Sincerely,
PayPal Account Review Department

Ramrod · 07-02-2005, 08:41

Just got the e-mail this morning........

Mags · 07-02-2005, 09:45

Quote:

Originally Posted by Richard M

I got this email, how the hell did they get an email address that I've never given to anyone?

Good point. I have my own domain so every time I sign up to a site, I use the name of the site @ mydomain as my e-mail address. This helps me track which sites share my e-mail address when I start receiving spam. When I signed up here, I used nthellworld@<mydomain> as my e-mail address. When I received the paypal e-mail this morning, it was addressed to nthellword@<mydomain>

Has somebody managed to get hold of the nthellworld user database? I have checked my public profile and my e-mail address isn't shown there. Likewise it isn't shown in my posts.

It seems very unlikely that somebody would have guessed the above address!

Mags

Nanook · 07-02-2005, 10:08

I've been sent the e-mail to the address that I used to register on this forum, & I have no paypal account.