PayPal Scam Alert!!!

D

dino

Feedback: +0 / =0 / -0
Joined
Jan 3, 1999
Messages
279
I use PayPal to buy and sell knives to other forum members. I just received this Email that takes you to a PayPal look-a-like site. Don't fall for it! Warn everyone you can.
--------------------------------------------------------
To: dino@texas.net
Subject: Account problem
From: "support@paypal.com" <support@paypal.com>
Content-Type: text/html
Message-Id: <20030410094252.9092CC2A0@mail.porsche-brno.cz>
Date: Thu, 10 Apr 2003 11:42:52 +0200 (CEST)
X-Spam-Status: No, hits=5.6 required=7.0
tests=CLICK_BELOW,MEMBER_2,RAZOR2_CHECK,SPAM_PHRASE_03_05 version=2.43
X-Spam-Level: *****
X-SA-Host: mail2.aus1.texas.net
X-UIDL: =Lc!!3p4!!@;Z!!;*d!!
X-Evolution-Source: pop://dino@mail.texas.net/inbox
Mime-Version: 1.0


<html>
<br>Dear valued PayPal member:
<br>It has come to our attention that your PayPal billing updates are
<br>out of order. If you could please take 5-10 minutes out of your
<br>online experience and update your billing records you will not run
<br>into any future problems with the online service. However, failure
<br>to update your records will result in account termination. Please
<br>update your records by April 25th.
<br>
<br>
<br>Once you have updated your account records your PayPal session will not be
<br>interrupted and will continue as normal. Failure to update will result in
<br>cancellation of service, Terms of Service (TOS) violations or future billing
<br>problems.
<br>
<br>To update your PayPal records click here:
<br><a HREF="http://www.lzt.us/.paypalDLLupdate/index.html" target="_self">http://cgi1.paypal.com/aw-cgi/paypalISAPI.dll?UPdate</a>
<br>
<br>
<br>
<br>PayPal Update team
<br>http://www.paypal.com
<br>
</html>
 
I have received something similar to this a month or so ago and it was legit. The supposedly randomly choose members and ask that they update there info. I too, was very skeptical and the only reason I went threw with it was b/c it was all done on Pay Pal’s site. I would use caution or e-mail PayPal before filling anything of this nature out to verify that’s where its coming from.
 
This one is clearly not legit - look at where the <A HREF tag points to http://www.lzt.us/.paypalDLLupdate/index.html

Which is where someone is clearly trying to steal account info.

My suggestion is: Don't use links in emails. Especially for finanical information.

If someone called you up on the phone and asked for all that account information - you probably wouldn't give it to them. Be especially careful on the internet.

-- Rob
 
BadGuy, I'm afraid that wasn't really PayPal's website you went to; it only looked like it. If you gave them your credit card number inform your credit card company immediately.

If you get any email like that and think it might be legitimate, DON'T click on the link in the email. Go to PayPal or Ebay or wherever the email claims to be from using your bookmarks; the link in the email doesn't take you where it appears to take you.
 
Cougar Allen, The e-mail I recieved was very similar to the one posted above, however not the same. I did update my info with them, however not threw the e-mail link. I went to paypal and logged in. Once I logged in, there was an update info screen. So I am prettty sure I was safe.
 
Sounds like a scam, initial domain registered to an unknown administrative contact, however, information listed as follows

2113 Breckenridge
GREENWOOD, AR 72936
US
(479) 996-1426

Linked to an e-mail account sorc3r3r@sorc3r3r.org

sorc3r3r.org is in turn registered by register.com which turns up the records

Organization:
NeoDaniX Inc.
Thomas Anderson
Matrix Stree 13
New York, NY 12344235
US
Phone: 004050732126
Email: neodanix@hotmail.com

This is no doubt bull (all the Matrix references give it away). That's just what the records say, other information suggests this is forged).

From the info I collected, it looks like a BS script kiddie con setup run from Romania (a couple of references to Romania throughout).

Sorry I couldn't be of more help, just contributing what I can.

Regards,

Shaun.
 
one more glaring inconsistency is that the address although listed to

2113 Breckenridge

doesn't match the phone number, which otherwise resolves correctly to

SMITH, KENNETH & LINDA
1006 Evergreen St
Greenwood, AR 72936


No doubt the 1337 hax0r did a lookup for Smith in the area, and decided to use their identity. Odd that he would screw up the street name. Hmmmmmm.... Good old register.com Would be interesting to know if there is a Breckenridge street in Romania, with a bored 14 year old in his parent's basement. If anyone got scammed by this, it would be wise to contact their credit card company. Honest enough mistake, not everyone is as paranoid as some of us ;) Hope this information proves useful.


Regards,

Shaun.
 
Fortunately, Paypal is one of few that has a real phone number so that you can talk to a real person, and verify crap like this. And, normally, the wait is very short.
 
Originally posted by DEA
eh
you might want to check this out, guys
seems pretty much on the level
http://www.paypalsucks.com/
Click to expand...

Well, folks, I believe that this Paypalsucks site has a personal vedetta against Paypal. Yes, Paypal sucks, but no more than any other huge internet company, or credit card company, for that matter. They are all huge and have millions and have reams of fine print. Any company with that many customers will be bound to have complaints. Although there are some valid complaints on this site, I have noted numerous falsehoods and out and out lies.

The very first page of this site makes a big deal, in bold print, that says:

"As for the customer service, Sollitto said they intentionally make the phone number very difficult to find in order to save costs."

This happens to be one of my pet peeves, and if you were talking about ebay, and many others it would be true. Although I have managed to ferret out some phone numbers for ebay, it's virtually, if not literally, impossible to find a phone number for ebay on their site. I'm sure it's there somewhere, but even the numbers I have found , through other means, they change frequently.

But, as I previously posted, it is most decidedly NOT true about Paypal. If you go to Paypal's site and click on HELP and then CONTACT US it takes you to a typical page on which they give you choices as to what the problem is and encourage you to send them an email. UNLIKE most others, However, on the same page it very clearly and obviously has this:

PHONE
If you have an issue of immediate concern and cannot find your answer in the Help Center, call our Service Center.

On the page, "Service Center" is a link and takes you directly to a page which provides this: 888 221-1161 I know this number has been valid for at least two years.

Over a period of three years I have been very pleased with Paypal's perfomance, and on the three occassions, when I had questions, I called this number and received quick, courteous, accurate information and had my problems solved, and issues resolved, in a very short period. With no runaround and no hassle.

This is just one person's experience, but, as internet companies go, Paypal may not be perfect, but is head and shoulders above most. My 2 cents. YMMV
 
More info on a sorc3r3r. Including DOB and other.

Name: Sorc3r3r Email: sorc3r3r@hotmail.com
Sex: Male Age: 21 Join Date: 11/28/2002 6:48:34 AM
Birthday: 20 July 1982 Country: New Zealand
Race: white Religion:
Education: Occupation:
Interests: Everything and anything
Introduction: Just a normal guy looking for some ppl to talk to, 5`8 blond/brown hair blue eyes. :)

Found here.

http://www.acepal.com/browse/browse.asp?country=New+Zealand
 
Impressive work! What are you guys using to track this Email down? I've already reported it to PayPal and the US Internet Fraud departemnt.
 
Shaun is using some "whois" site, im guessing.
If so, which one?
Register WHOIS
Verisign WHOIS
Access WHOIS
Or is it a different one?

And I just checked the hotmail names.

A sorc3r3r also shows up on a Russian site, but I dont know to much bout it, cept that it is a RUSSIAN HACKING SITE. http://www.bot.net.ru/seen/s-main.php?n=122360

http://www.bot.net.ru/index.php?&language=en

More searching shows that a NeoDaniX, is found on some Romanian sites.

Dont know really what to think, maybe the sorc3r3r I found is a different person? I dont know.

A NeoDaniX archived site(s). Rmmanian and appears to deal with hacking.

http://web.archive.org/web/*/http://www.neodanix.go.ro
 
You must log in or register to reply here.
Back
Top