Change Password from Paypal - is this fake?

[lkohawaii]

Today I got an e mail from somebody at yahoo.com saying that my Paypal account was trying to be accessed from a foreign sight. It gave me a link to change my password if I haven't been traveling. I have been going to many travel sites recently anyone get this message? I did forward it on to PayPal. Anyone think I should change my password?

 

[JANNYANS]

I had this too and sent it to e-bay asking them to confirm it was genuine this is the reply I got back
Hello,

Thank you for contacting eBay's Trust and Safety Department about email
solicitations that are falsely made to appear to have come from eBay.
These emails, commonly referred to as "spoof" messages, are sent in an
attempt to collect sensitive personal information from recipients who
reply to the message or click on a link to a Web page requesting this
information.

The email you reported did not originate from, nor is it endorsed by,
eBay. We are very concerned about this problem and are working
diligently to address the situation. We are currently investigating the
source of this email to take further action. You may rest assured that
your account standing has not changed and that your listings have not
been affected.

We advise you to be very cautious of email messages that ask you to
submit information such as your credit card number or your email
password. eBay will never ask you for sensitive personal information
such as passwords, bank account or credit card numbers, Personal
Identification Numbers (PINs), or Social Security numbers in an email
itself. If you ever need to provide information to eBay please open a
new Web browser, type www.ebay.com, and click on the "site map" link
located at the top of the page to access the eBay page you need.

If you have any doubt about whether an email message is from eBay,
please forward it immediately to spoof@ebay.com and do not respond to it
or click on any of the links in the email message. Please do not change
the subject line or forward the email as an attachment.

If you entered personal information such as your password, social
security number or credit card numbers into a Web site based on a
request from a spoofed email, you need to take immediate action to
protect your identity. We have developed an eBay Help page with valuable
information regarding the steps you should take to protect yourself.

To get to the "Protecting Your Identity" Help page from the eBay site,
please click on the "help" link located at the top of most eBay pages
and select the following topics when the "eBay Help Center" window
appears:

Safe Trading > If Something Goes Wrong > Identity Theft

We encourage you to review additional information about protecting your
identity found in the eBay Help system. Please click on the "help" link
located at the top of most eBay pages and select the following topics
when the "eBay Help Center" window appears:

Safe Trading > If Something Goes Wrong& > Account Theft > Account
Protection

Once again, thank you for alerting us to the spoof email you received.
Your vigilance helps us ensure that eBay remains a safe and vibrant
online marketplace.


Regards,

Ian
eBay SafeHarbor
Investigations Team
______________________________
eBay
Your Personal Trading Community (tm)

*******************************************

Important: eBay will not ask you for sensitive personal information
(such as your password, credit card and bank account numbers, Social
Security numbers, etc.) in an email. Learn more account protection tips
at:

http://www.pages.ebay.com/help/account_protection.html
_____________________________________________

For our latest announcements, please check:

http://www2.ebay.com/aw/announce.shtml
_____________________________________________
*****************


and this is the original e-mail I received





dear ebay user,

we recently noticed one or more attempts to login into your ebay
account from a foreign ip address and we have reasons to believe that
your account has been hijacked by a third party without your
authorization.


in order to protect your sensitive information or unauthorized listings
we temporarily suspended your account for further investigations. to
reactivate your account, click on the link below and confirm your
identity by completing the secure form that will appear.


if you recently accessed your account while traveling, the unusual
login attempts may have been initiated by you.

take our apologies for any inconvenience that this may cause.


thank you

ebay account theft prevention






the log in attempt was made from:

ip address: 205.188.209.166

isp host: cache-dq04.proxy.aol.com














------------------------------------------------------------------------
--------


announcements | register | safeharbor (rules & safety) |
feedback forum | about ebay

copyright © 1995-2004 ebay inc. all rights reserved.
designated trademarks and brands are the property of their respective
owners.

 

[lkohawaii]

My message was from Pay Pal and I did click on the link. I wonder if I did something i shouldn't have. I didn't change my password though. Changed browsers...to one I knew was secure.

 

[iNTeNSeBLue98]

As long as you didn't put any info on the page that came up with the link you are ok. Forward the email to spoof@paypal.com. You can always sign in directly at the PayPal website. If there was a need to update your info, a screen onsite would request you to do so.

 

[piglet33]

I got an email like that once and clicked on the link. I didn't put in
any info, but wound up getting infected anyway. I sent the email
to the spoof email address and got a reply back saying that I should
check my PC for viruses and adware/malware and then change all my passwords.

So, since you clicked on the link, then if I were you I would run your anti-virus program to check for viruses and check your PC for any adware or malware that might have been downloaded to your PC. I use these - Ad-Aware, Spywareblaster, Spy Sweeper, Webroot SpyAudit and SpyBot Search & Destroy. You can get them here:

Ad-Aware - http://www.lavasoftusa.com/support/download/

SpyBot Search & Destroy - http://www.safer-networking.org/en/index.html

SpywareBlaster - http://www.javacoolsoftware.com/spywareblaster.html

Spyware Sweeper - http://www.webroot.com/wb/products/spysweeper/enterprise.php

or you can get them all here:
http://www.snapfiles.com/Freeware/security/fwantispy.html

Webroot SpyAudit is pretty good. It just checks your PC for any adware or malware but doesn't remove it. You need to use the above programs for that.

Better to be safe than sorry.

Reneé

 

[maggiew]

If you want to change your password, log on to the PAYPAL site and change it. DO NOT CHANGE YOUR PASSWORD THROUGH THE LINK!!!!!!!! Paypal and eBay will NEVER have you change your password or personal information through a link.

Also, NEVER click on those links. Wait until you hear from eBay or Paypal spoof. Even if you do not enter your personal information by clicking on the link you can get infected and it also tells them that your email is a "hot" email i.e. valid.

Maggie

 

[Ishy]

I review the headers - in pine mailers "H" turns them on, in outlook expresse you need to click view on your file menu and message options, then look for "Received: from blahblah.com ([65.111.11.11]) -

In this case I would foward the message as an attatchment to abuse@blahblah.com and/or spam@blahblah.com -- If its a major ISP - I will hit the website and find out the techie numbers and request to have the account suspended for unacceptable fraudulent behavior - there is also a site called computercops.com or org where you can report abuses/crimes.

I will also take the ip numbers, in this case 65.111.11.11 and go to samspade to investigate it.. ips - sometimes the ip will point you to a persons exact static ip - these can be blocked.

I think its best that we are proactive in getting these peoples emails and ISP accounts suspended.

 

[gapere]

I got a similar E-mail the other day posing as my CITI bank credit card. The title of the E-mail was convincing enough for me to click on it. It when on about some added security measures CITI bank was doing and to click on a link to a website. I was supposed to supply my account number and ATM PIN number for the account.

Needless to say I wanted to forward the E-mail to CITI bank but their contact us feature gave me the runaround

Word to the wise, keep your virus definitions updated and use the spyware programs piglet33 mentions.

 

[lkohawaii]

thanks everybody....Paypal sent an e mail saying that it was a fake.

 

[renniks]

It's best NEVER to follow a link and give any personal information such as Credit Card, log-ins, passwords wtc.. Always type the name of the site in the broswer window. I get tons of fake letters pretending to be from Ebay and Paypal. They LOOK authentic but aren't. You really need to read the headers and return paths of the emails to see where they came from.

 

[fac]

Originally posted by lkohawaii
My message was from Pay Pal and I did click on the link. I wonder if I did something i shouldn't have. I didn't change my password though. Changed browsers...to one I knew was secure.

did you even type in the password? if you did, I suggest you go directly to pay pal (i.e. not via the link) again and change the password

 

[piglet33]

Originally posted by fac
did you even type in the password? if you did, I suggest you go directly to pay pal (i.e. not via the link) again and change the password

Even if she didn't type in a password, it can still be stolen or accessed if it is stored on her computer or if some malicious code was downloaded to her PC, then someone can monitor her keystrokes and the next time she goes there, they have her password. This happened to a friend of mine. We have to be very careful about everything that is done on a computer and make sure you scan with anti-virus and adware software.

 

[4greatboys]

As a rule I never follow any paypal, e-bay or even cc link. I delete every message. You can always log onto you acct at those places to check my accounts.

 

[hulabird]

Yes, please NEVER click a link from an email--these scam artist losers out there can make things seem really authentic, but never trust it--EVER. Just go to the site in question yourself and log in like you normally would, if they need any info from you I am sure they will let you know when you log in. Better to be safe than sorry!