Dave A
USER UNDER INVESTIGATION - DO NOT TRADE
Registered: 10th Dec 03
Location: County Durham
User status: Offline
|
I no longer use paypal, mainly because of the stupidly high fees but also because it is very very dodgy.
spoke to someone today that owns a business that uses paypal that had over £9000 taken from his account last week. he recieved a phonecall from someone with an american accent claiming to be paypal, he ignored their request for info, next day he got an email from paypal, asking him to log in and solve a dispute. he followed the link, found the dispute. was from a genuine customer he had that week and just thought it was real seeing as it was a real customer.
answered the dispute, logged on the next day to find his account had been closed and £9000 emptied.
turned out the customer that logged the dispute bought from him purposely so that they could make the dispute seem real so he would log on without suspicion. they then took his details, sent the money to lots of different accounts and closed his account.
what did paypal do? well nothing. they asked him to send them verification details by fax and then said they wouldnt be able to let him log in until his ID was confirmed. 2 days later the account was reopened for him and he is £9000 down. paypal have done nothing to help him and claim that it will take up to 60 days to trace the money, even after admiting it is 100% a case of fraud they wont give him back a penny.
Today I recieved a similar email, sent it to him and turns out it is the same thing. also recieved a call from my bank asking If I had tried to send £3000 to my paypal account from my credit card! within minutes my bank had found the scouce of the request and had terminated all connections between my business account and paypal.
I am currently trying to get paypal to close my account and destroy all personal information that they hold about me. if anyone gets this email:
Dear ***** *******,
As part of our security measures, we regularly screen activity in the PayPal system.
We recently noticed the following issue on your account:
Your bank has contacted us regarding some attempts of charges from your credit card via the Paypal system. We have reasons to believe that you changed your registration information or that someone else has unauthorized access to your Paypal account Due to recent activity, including possible unauthorized payments placed on your account, we will require a second confirmation of your identity with us in order to allow us to investigate this matter further. Your account is not suspended, but if in 48 hours after you receive this message your account is not confirmed we reserve the right to suspend your Paypal registration. If you received this notice and you are not the authorized account holder, please be aware that it is in violation of Paypal policy to represent oneself as another Paypal user. Such action may also be in violation of local, national, and/or international law. Paypal is committed to assist law enforcement with any inquires related to attempts to misappropriate personal information with the intent to commit fraud or theft. Information will be provided at the request of law enforcement agencies to ensure that perpetrators are prosecuted to the full extent of the law.
To confirm your identity with us click here:
https://www.paypal.com/cgi-bin/webscr/? cmd=login update information
Case ID Number: PP-741-961-851
After responding to the message, we ask that you allow at least 72 hours for the case to be investigated. Emailing us before that time will result in delays. We apologize in advance for any inconvenience this may cause you and we would like to thank you for your cooperation as we review this matter.
Sincerely,
PayPal Account Review Department
PayPal Email ID PP522
This message and any files or documents attached may contain classified information. It is intended only for the individual or entity named and others authorized to receive it. If you are not the intended recipient or authorized to receive it, you are hereby notified that any disclosure, copying, distribution or taking any action in reliance on the contents of this information is strictly prohibited and may be unlawful. If you have received this communication in error, please notify us immediately then delete it from your system. Please also note that transmission cannot be guaranteed to be secure or error-free.
Website:
Spoof website not online at time of report
delete it asap after forwarding it to: spoof@paypal.com
|
Dave A
USER UNDER INVESTIGATION - DO NOT TRADE
Registered: 10th Dec 03
Location: County Durham
User status: Offline
|
I didnt log on to my account from the link in that email btw, never gave my details out to anyone. how they managed to get in and try and transfer money from my credit card to my account is a mystery.
|
CorsaLaydee
Member
Registered: 13th Nov 06
Location: East Sussex
User status: Offline
|
When I first registered with paypal I was un aware of their fees, sold my car for 3750 and the buyer paid through paypal and I had nearly 400 in fees taken!
I'll keep an eye out for that email
|
John
Member
Registered: 30th Jun 03
User status: Offline
|
Are people that are being conned by this going to a genuine paypal site or are they following links in emails?
|
Colin
Member
Registered: 4th Apr 02
User status: Offline
|
I dont respond to any emails from paypal or ebay - neither have any reason to be contacting me & any business I need to do with them I do through the official site!!
Heard about people getting stung before though & paypal not wanting to know!! I personally dont deal in large volumes of money on either & limit my paypal to £180.
|
abdus
Member
Registered: 23rd Feb 06
User status: Offline
|
Almost 3 years now I have never encountered any problems until now
Thanks for the warning though.
Never click on any link in Mail Inbox. Always login to Paypal or anything suspicious, just call Paypal asap.
|
Dave A
USER UNDER INVESTIGATION - DO NOT TRADE
Registered: 10th Dec 03
Location: County Durham
User status: Offline
|
well if you follow the link it goes to a fake paypal site. but if you use the links on the page it takes you directly to the proper paypal site.
thing is, the guy that got ripped off had a skightly different email asking him to log in to respond to a dispute, he noticed that the dispute was opened by a real buyer so he had no need to think it was a spoof email and was quick to log in and find out what the dispute was about.
I didnt follow the link but somehow still managed to nearl y have £3000 taken. if HSBC werent so quick to act I may well have been robbed as well.
|
Steve
Premium Member
Registered: 30th Mar 02
Location: Worcestershire Drives: Defender
User status: Offline
|
yes if he clicked the link from the email he was a numpty, granted the scammers are complete cunts as are paypal, but people should be educated in checking spoof websites frmo email links by now
[Edited on 10-02-2007 by Steve]
|
John
Member
Registered: 30th Jun 03
User status: Offline
|
Unless somebody guesses the password or something there's not really much you can be conned by.
The one big con is if you are paid by one of these hacked accounts and send the item out, paypal instantly take the money back from your account and leave the innocent party out of pocket.
If you click on a link in an email however and give out credit card pins and all the other information these sites normally ask for, and still not notice something is up its not paypals fault.
|
Dave A
USER UNDER INVESTIGATION - DO NOT TRADE
Registered: 10th Dec 03
Location: County Durham
User status: Offline
|
exactly Steve.
but they are getting craftier. its amazing how they even went to the length of buying something from him for £90 and waiting for delivery before logging a fake dispute. they must have known he had lots of money in his account. Inside info from paypal I think, no-one else would have known.
|
John
Member
Registered: 30th Jun 03
User status: Offline
|
I'm getting confused here?
He would have only lost 90 quid from a 90 quid dispute.
If he gave all his details out to a phishing site they just logged in to paypal and then done whatever, not paypals fault.
|
Welsh Dan
Member
Registered: 23rd Mar 00
User status: Offline
|
quote: Originally posted by John
I'm getting confused here?
He would have only lost 90 quid from a 90 quid dispute.
If he gave all his details out to a phishing site they just logged in to paypal and then done whatever, not paypals fault.
A fraudster, buys something in a legitimate auction, just so he can show that he has traded with Daves mate.
Said fraudster then files a dispute, and daves mate, knowing that he has traded with the individual believes it to be genuine and logs in (to the phishers website)
Fraudster then has his details, and au revoir £9k.
|
abdus
Member
Registered: 23rd Feb 06
User status: Offline
|
If listings are made in ebay, I always make sure I edit selling preferences and buyers requirements.
Never ever follow a link in your mailbox...
And regarding HSBC, they definitely act very quickly...their card services is
|
Dave A
USER UNDER INVESTIGATION - DO NOT TRADE
Registered: 10th Dec 03
Location: County Durham
User status: Offline
|
got it in 1 welsh dan.
he understands that it is partly his fault that he clicked the link but paypal have actually restricted him from his account and not helped at all. They claim they wont look into the case until he provides ID to verify his account
|
abdus
Member
Registered: 23rd Feb 06
User status: Offline
|
I guess he should fax his ID to PayPal asap...then call them ASAP
|
Dave A
USER UNDER INVESTIGATION - DO NOT TRADE
Registered: 10th Dec 03
Location: County Durham
User status: Offline
|
probably has by now.
the problem lies with paypal, its not secure enough. they encourage big businesses to use them but dont do enough to protect them, they encourage businesses to keep larger amounts in the account but I would never have more than £800 in mine at any 1 time.
|
abdus
Member
Registered: 23rd Feb 06
User status: Offline
|
i never had more than 49.99 on mine...Always withdraw as it hits £50 (no need to the the 50p charge )
[Edited on 10-02-2007 by abdus]
|
mav
Member
Registered: 19th Jun 01
Location: Scotland
User status: Offline
|
quote: Originally posted by Colin
I dont respond to any emails from paypal or ebay - neither have any reason to be contacting me & any business I need to do with them I do through the official site!!
How I work it too....
But amazing what scammers get away with no...
|
Steve
Premium Member
Registered: 30th Mar 02
Location: Worcestershire Drives: Defender
User status: Offline
|
you can talk gordon, i know about your fake stone island cons on ebay
|
mav
Member
Registered: 19th Jun 01
Location: Scotland
User status: Offline
|
shut it..
she never got back to me again about that and never left feedback...
|
drax
Member
Registered: 5th Feb 05
Location: Sittingbourne, Kent
User status: Offline
|
maybe its got something to do with those actual global name servers being hacked
|
Ian
Site Administrator
Registered: 28th Aug 99
Location: Liverpool
User status: Offline
|
quote: Originally posted by Dave A
the problem lies with paypal, its not secure enough.
Except in this example, the trader gave away his log in to another web site that wasn't Paypal.
£9k in the account I personally would be paying closer attention to the address bar.
|
John
Member
Registered: 30th Jun 03
User status: Offline
|
Also its not hard to pinpoint who may have lots of money in a paypal account.
You would just have to look for any big seller who accepts paypal, whether that be on ebay or a site.
This really is just basically somebody being caught out by a phishing link.
Paypal I have to agree aren't very good when you are conned but as Ian said, should be much more carefull.
|
Ian
Site Administrator
Registered: 28th Aug 99
Location: Liverpool
User status: Offline
|
Good con though as its technically not theft. Won't even matter where the money went, it was moved legitimately by a person in control of the account.
You could log on yourself from an internet cafe, move all your own money to a friends Paypal account, who then withdraws it.
You then claim being phished and the subsequent fraud, ask for the money back and on the sly you and your mate go halves.
This example of course the fraudster and victim are not known to each other but from a technical stand point there is nothing to say that they are not.
|
John
Member
Registered: 30th Jun 03
User status: Offline
|
I sold something to a guy on ebay before, got payment to paypal, transferred it over to my bank, sent the item out.
About a week later paypal decided the card the guy used was fraudulent and took the money out of the paypal account. Nice of them.
Luckily there had been a mistake and I got the money but if it hadn't been a mistake I would have been that money down.
|