Options
A fishing scam that got me - BE CAREFUL!
Artist
Posts: 2,038 ✭✭✭
Hello All -
Maybe this has been posted before - even if it has, perhaps my posting it again will help still more others...
This week I got taken by a fishing scam - usually I have a sixth sense for these things and see them coming from a mile away, but this one got me. Here's how it works:
I got an email, from service@paypal.com, informing me that Melinda Navarro had made a payment to my account for $93.50. This email looked exactly like other such legitamate emails I have received form paypal in the past, and so my first thought was that Melinda Navarro had made a mistake. I clicked the link which took me to a site that looked EXACTLY like the Paypal Login screen, and had a URL that began with http://www.paypal.com, except when I typed my name & password word into I got a screen that said there was an error processing my login. It took me all of three seconds to realize I had just been had...
I immediately logged into the real Paypal and changed my password. Just to be sure, I also deleted all my cards & accounts. And just to be extra sure, I put a 48 hour hold on my bank account to make sure that no illicit transactions had occured. Luckily, I think I am safe - but boy, this was an effective fishing scheme. Scary effective.
Hope none of you get this same email - but if you do I hope this post helps you avoid a potentially nightmarsih situation.
~ Artist
Maybe this has been posted before - even if it has, perhaps my posting it again will help still more others...
This week I got taken by a fishing scam - usually I have a sixth sense for these things and see them coming from a mile away, but this one got me. Here's how it works:
I got an email, from service@paypal.com, informing me that Melinda Navarro had made a payment to my account for $93.50. This email looked exactly like other such legitamate emails I have received form paypal in the past, and so my first thought was that Melinda Navarro had made a mistake. I clicked the link which took me to a site that looked EXACTLY like the Paypal Login screen, and had a URL that began with http://www.paypal.com, except when I typed my name & password word into I got a screen that said there was an error processing my login. It took me all of three seconds to realize I had just been had...
I immediately logged into the real Paypal and changed my password. Just to be sure, I also deleted all my cards & accounts. And just to be extra sure, I put a 48 hour hold on my bank account to make sure that no illicit transactions had occured. Luckily, I think I am safe - but boy, this was an effective fishing scheme. Scary effective.
Hope none of you get this same email - but if you do I hope this post helps you avoid a potentially nightmarsih situation.
~ Artist
0
Comments
Jerry
<< <i>I get those all the time.When i do,i don't open anything else up in the email.I just go to my paypal account to make sure all is ok. >>
Exactly.... DO NOT use the links.... Open a browser window and access your account (paypal or anyhing else) directly.......
<< <i>I have to admit I've become lax. I just delete them. I use to go to my paypal account right away to make sure all was ok, but now I usually don't.
Jerry >>
Me too.... It's virtually all phishing expeditions with me..... I essentially ignore them all.... if they're new ones, I'll usually forward them to spoof@paypal.com or spoof@ebay.com
Never click on links in an email. Always open a new browser window or browser tab and type in the link or use a favorites link.
Following these two rules will eliminate 99.5% of phishing scams.
It is a crying shame that Ebay and Paypal refuse to implement simple and effective security procedures that many financial institutions now use on their sites. These include a user selected image, and tag line that appear when ever a user types in their password. This is light years against the ridiculously ineffective "Verisign." The overhead would be no more than the avatars on this site (very low). The cynical conclusion is that some bean counters at Ebay/Paypal looked at that idea and found that the scams are contributing to the bottom line in a positive way.
<< <i> It is a crying shame that Ebay and Paypal refuse to implement simple and effective security procedures that many financial institutions now use on their sites. These include a user selected image, and tag line that appear when ever a user types in their password. This is light years against the ridiculously ineffective "Verisign." The overhead would be no more than the avatars on this site (very low). The cynical conclusion is that some bean counters at Ebay/Paypal looked at that idea and found that the scams are contributing to the bottom line in a positive way. >>
Since Bank of America implemented the suggested procedures their website is so slow as to be unusable. I'll admit this is only one of the reasons I'll be closing my account but it's a good one. I'm also always skeptical of a non-participant who has all the answers. --Jerry
Mike
<< <i>This email looked exactly like other such legitamate emails I have received form paypal in the past, and so my first thought was that Melinda Navarro had made a mistake. I clicked the link which took me to a site that looked EXACTLY like the Paypal Login screen >>
Don't ever, ever, EVER click any link in any email no matter how legitimate it looks.
My icon IS my coin. It is a gem 1949 FBL Franklin.
For example, the opening line in the email was: "Hello dear Bank of America customer!". If I read that in my head with a Nigerian accent, it makes perfect sense!
Didn't wanna get me no trade
Never want to be like papa
Working for the boss every night and day
--"Happy", by the Rolling Stones (1972)
Great Idea I think I will try that
login: u r sofaking
password: stupid
I suspect that someone who bought an Ebay item from me sold the name and email address to scammers.
The Mysterious Egyptian Magic Coin
Coins in Movies
Coins on Television
<< <i>
<< <i> It is a crying shame that Ebay and Paypal refuse to implement simple and effective security procedures that many financial institutions now use on their sites. These include a user selected image, and tag line that appear when ever a user types in their password. This is light years against the ridiculously ineffective "Verisign." The overhead would be no more than the avatars on this site (very low). The cynical conclusion is that some bean counters at Ebay/Paypal looked at that idea and found that the scams are contributing to the bottom line in a positive way. >>
Since Bank of America implemented the suggested procedures their website is so slow as to be unusable. I'll admit this is only one of the reasons I'll be closing my account but it's a good one. I'm also always skeptical of a non-participant who has all the answers. --Jerry >>
That is an issue with the Bank of America servers and their technical team. The security measures are not much more overhead than the avatars on this site, and everyone has an avatar and a tag line.
Does anyone believe that 80x80 images and twenty byte phrases are what has slowed the BofA site to a crawl? Would you prefer that banks have a useless "Verisign" security measure so thousands of folks can have their bank accounts compromised, on the same percentage as Ebay and Paypal accounts? Would that make an objective person more likely or less likely to use that bank over another with simple but effective security?
The latest thing that's happening to me is a record phone call that wants you to hit 9 to talk to a operator. They are claiming that I'm a perfered customer and can get 6.25% interest on all of my credit cards. They don't say who they are so I just hang up. I figure once they get your CC info they're off to the races. You have to think everything is a scam no days.
WH
<< <i>Hello All -
Maybe this has been posted before - even if it has, perhaps my posting it again will help still more others...
This week I got taken by a fishing scam - usually I have a sixth sense for these things and see them coming from a mile away, but this one got me. Here's how it works:
I got an email, from service@paypal.com, informing me that Melinda Navarro had made a payment to my account for $93.50. This email looked exactly like other such legitamate emails I have received form paypal in the past, and so my first thought was that Melinda Navarro had made a mistake. I clicked the link which took me to a site that looked EXACTLY like the Paypal Login screen, and had a URL that began with http://www.paypal.com, except when I typed my name & password word into I got a screen that said there was an error processing my login. It took me all of three seconds to realize I had just been had...
I immediately logged into the real Paypal and changed my password. Just to be sure, I also deleted all my cards & accounts. And just to be extra sure, I put a 48 hour hold on my bank account to make sure that no illicit transactions had occured. Luckily, I think I am safe - but boy, this was an effective fishing scheme. Scary effective.
Hope none of you get this same email - but if you do I hope this post helps you avoid a potentially nightmarsih situation.
~ Artist >>
make sure it says https://, not just http:// This means secure site https
<< <i>
<< <i>This email looked exactly like other such legitamate emails I have received form paypal in the past, and so my first thought was that Melinda Navarro had made a mistake. I clicked the link which took me to a site that looked EXACTLY like the Paypal Login screen >>
Don't ever, ever, EVER click any link in any email no matter how legitimate it looks. >>
Yep, repeated for emphasis. I don't even click on links in legit emails anymore.
Open a new browser window, type the URL, make sure the site is secure, and then log in. It's the only way to be sure.
<< <i>I like to have fun with these and type a new password and username in (one telling them what they can do to themselves). >>
Don't click on the link! Yes that idea of giving them that password and username sounds tempting, but at the same time they may be giving you a keylogger. It has been known to happen.