There are affiliate links on this page.
Read our disclosure policy to learn more.
Phishing Example: PayPal
Phishing Example: PayPal - Fake Requests for Personal Financial Information
Below are examples of phishing attacks submitted to ConsumerFraudReporting and antiphishing.org: many of these links open a page on the antiphishing.org website.
Here is what PayPal suggests:
- Look for a PayPal Greeting: PayPal will never send an email with the greeting "Dear PayPal User" or "Dear PayPal Member." Real PayPal emails will address you by your first and last name or the business name associated with your PayPal account.
- If you believe you have received a fraudulent email, please forward the entire email-including the header information-to spoof@paypal.com. We investigate every spoof reported. Please note that the automatic response you get from us may not address you by name.
- Don't share personal information vian email: We will never ask you to enter your password or financial information in an email or send such information in an email. You should only share information about your account once you have logged in to https://www.paypal.com/.
- Don't download attachments: PayPal will never send you an attachment or software update to install on your computer.
And if you think you have been victimized, see our What to do, if you think you have been the victim of identity theft page!
Example PayPal Scam Email:
| Security Center |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
PayPal is committed to maintaining a safe environment for its community of buyers and sellers. To protect the security of your account, PayPal employs some of the most advanced security systems in the world and our anti-fraud teams regularly screen the PayPal system for unusual activity. Recently, our Account Review Team identified some unusual activity in your account. In accordance with PayPal's User Agreement access to your account will be limited. This is a fraud prevention measure meant to ensure that your account is not compromised. In order to secure your account we may require some specific information from you. We encourage you to log in by clicking on the link below and complete the requested form as soon as possible. https://wwwpaypal.com/cgi-bin/webscr?cmd=_login-run Ignoring our request, for an extended period of time, may result in account limitations or may result in eventual account closure. Thank you for your prompt attention to this matter. Please understand that this is a security measure meant to help protect you and your account We apologize for any inconvenience. Sincerely, PayPal Account Review Department PayPal Email ID PP4392 |
|
http://60.35.73.121/pp/www.paypal.com/
Reporting a Possible Phishing Attack
If you need advice about an Internet or online solicitation, or you want to report a possible scam, use the Online Reporting Form or or call the NFIC hotline at 1-800-876-7060
For More Information About Phishing, See:
- Click Here for a copy of NCL's Phishing Brochure. Requires Adobe Acrobat Reader.
-
How Not to Get Hooked by a 'Phishing' Scam
[PDF version]
Offers tips on how to avoid falling victim to a new type of spam scam in which consumers are deceived into handing over personal financial information. -
Is Someone "Phishing" for Your Information? [PDF version]
Cautions consumers about emails that claim to be from government agencies in an attempt to steal personal information. - Digital PhishNet Web site.
- Phish Report Network - a cooperative effort by several companies providing an information clearinghouse that will be run by WholeSecurity, a provider of client-side security solutions.
- Internet Crime Prevention & Control Institute, a cooperative effort between Zero Spam Network Corp. and the University of Miami. Staffed by Miami undergraduate and graduate students and Zero Spam employees, works closely with the Secret Service's Electronic Crimes Task Force and ISPs in the United States and abroad to identify and block traffic to machines hosting phishing sites.