Fake Emails Could Break You
The email seemed legitimate. It had the Paypal logo and the URL address had Paypal in it. The company was just asking me to verify some information – it seems they were tightening up on some security issues. All I had to do was click.
There were a couple of problems with the email. First, I don’t use that particular email address for my Paypal account. Second - and this one I didn’t notice until later - the email was addressed to the wrong person.
The first thing I did was use a different browser to go to my Paypal account. I wanted to compare the account number I had with the one on the email. When those didn’t match up, I copied the email (including the URL) and sent it to the Paypal security site.
Even with all the discrepancies, I still figured it was just Paypal sending the request to the wrong user. I was wrong. Shortly after making Paypal aware of the situation, I received a reply that it was a scam site. Clicking on the URL that was provided would put my information in jeopardy.
I was fortunate enough not to have taken the bait.
Anytime an email arrives requesting information – or a phone call comes doing the same – do not contact the number or website that is given. Instead, call or contact your institution directly. It’s better to have them tell you the contact was real then to have to try and win back the money (or identity) you may be giving away to the bad guys.

tag this













July 18th, 2007 at 1:31 pm
[…] bad guys are creative and deceptive. If users don’t take some responsibility for security, then there is no company that can protect them. Companies, like PayPal, are continuously working […]