Check out this new(?) PayPal phish!

csw

Recently received this email, purportedly from PayPal ("service@paypal.com"), which I use frequently as a buyer. The email I received had all the 'right' graphics.

I didn't buy anything from IGE U.S. LLC (which evidently is a real company based in Florida), so I immediately logged on to PayPal in a different browser. There was nothing there about any debit or transaction with this IGE U.S. LLC, thank goodness. Clearly the idea is for users to click on the link provided because the transaction was not authorized.

I thought I'd seen it all with these phishing attempts, but this was a new one for me, especially inasmuch as some dude's name and Nevada address are listed! Could this Kenneth Meadors guy be dumb enough to use his real name? (More likely that someone's using it for him, or that the person is simply fictional.) I forwarded it to PayPal's spoof email, but haven't heard anything back.

Here it is, cut and pasted (except for the graphics and what not). Beware!

--chris


From : service@paypal.com <service@pAYpal.com>
Reply-To : "service@paypal.com" <service@pAYpal.com>
Sent : Saturday, May 13, 2006 5:31 AM
To : toothsayer62@hotmail.com
Subject : Receipt of Your Payment to IGE U.S. LLC

Dear Christopher Wheeler,
This email confirms that you have paid IGE U.S. LLC (sales@ige.com) $318.99 USD using PayPal.
--------------------------------------------------------------------------------

--------------------------------------------------------------------------------

Payment Details

Transaction ID: 74J786002G7676945
Total: $318.99 USD
Item/Product Name: IGE Order 81805805397
Item/Product Number: 5196cd58-55d2-4730-8157-51c0e939dabb
Invoice ID: 2592170


--------------------------------------------------------------------------------

Business Information

Business: IGE U.S. LLC
Contact E-Mail: sales@ige.com

--------------------------------------------------------------------------------

Shipping Address

Shipping Info: Kenneth Meadors
P.O. Box 6656
Incline Village NV 89451
United States
Address Status: Unconfirmed

With PayPal, you’re protected against unauthorized payments sent from your account. This payment will not appear in your PayPal account untill we verify this transaction.If this is transaction is not authorized, click on the link below to fill a claim and cancel the payment.


--------------------------------------------------------------------------------
https://www.paypal.com/ewf/f=sa_unauth

--------------------------------------------------------------------------------

Please do not reply to this email. This mailbox is not monitored and you will not receive a response. For assistance, log in to your PayPal account and choose the Help link located in the top right corner of any PayPal page.

To receive email notifications in plain text instead of HTML, update your preferences here.

PayPal Email ID PP120

Russ

Not new.

Russ, NCNE

Michigan

Have gotten those as well. Had me worried at first but I did not click on the link.

Went to my paypal account and no record at all of the transaction.

AlixTCat

Of course no record of the transaction in PayPal account, as it IS a phish. However, the e-mail mentions that there will be no record in the PayPal account, so it could be easy for someone to fall for. Especially with the "accurate looking" https:// address given.

The main thing to remember with ALL e-mail you get, 99% of it is phishing if you know you didn't order any items and if know that you don't possess a Chase credit card, etc. But, still, even I have ALMOST been fooled by some of these phish e-mails. I just delete anything that has a sense of urgency to it, anything about a credit card or bank I don't bank at, anything from a bank I DO bank at that isn't tellling me about a payment going through to someone or a direct deposit to my account. Keeps me safe.

Also, if you use FireFox, you can get the Google toolbar that pops up a box telling you that you are at a known phishing site if you DO click one of those links in an e-mail. I tested it out and it works pretty well. You'll have to search on Google for "google toolbar for firefox" as I could not find it on the extensions pages for Firefox.

Good luck and safe surfing.

Jonathan

BECOKA

Yep, seen that one many times.

e-bay and Pay-Pal should have a mandatory read me screen when signing up that specifically states, never reply or click a link from an e-mail. Go to the site directly and check messages. This would save a lot of hassle. Maybe even prefice the begining of any e-mails sent with this as a reminder.