Have you been phished?
Chances are you have. Phishing is a form of spam but much more harmful. A phisher sends out eMail’s that appear to be legitimate to unsuspecting Ebay, PayPal, or other financial customers asking them to update their personal or financial information. The eMail looks credible and the website the recipient is directed to looks exactly like the company’s legitimate website.
Here’s how it works.
I receive an eMail that looks like this.
You have added laptopseller@yahoo.com as a new email address for your PayPal account.
If you did not authorize this change or if you need assistance with your account, please contact PayPal customer service at:
https://www.paypal.com/row/wf/f=ap_email
The link displays what you see above but it actually takes you here
http://cgi5-paypal-changemail.us/cgi-bin/login.html
Notice it is not a PayPal weblink!
Thank you for using PayPal!The PayPal Team
Please do not reply to this e-mail. Mail sent to this address cannot be answered. For assistance, log in to your PayPal account and choose the "Help" link in the header of any page.
PROTECT YOUR PASSWORD
NEVER give your password to anyone and ONLY log in at https://www.paypal.com/. Protect yourself against fraudulent websites by opening a new web browser (e.g. Internet Explorer or Netscape) and typing in the PayPal URL every time you log in to your account.
The return address is
service@paypal.com <service @paypal.com></service>
and so everything looks official. Of course I’m concerned as it appears that an unauthorized eMail address has been added to my account so I better log in and check it out.
When I click on the link provided in the eMail, I am sent to a website that looks exactly like my PayPal login page. I enter my login name and password and I’m then directed to the real PayPal website. I’ve been phished! The phisher now has my PayPal login name and password because the PayPal login form was not on Paypal’s website, but on the phishers website. The login form I used relayed my private information to the phisher’s eMail box and now he’s shopping on the Internet using my PayPal account.
Here’s another one from what appears to be Ebay.
Dear eBay User,
During our regular update and verification of the accounts, we could not verify your current information. Either your information has changed or it is incomplete. As a result, your access to bid or buy on eBay has been restricted. To start using your eBay account again, please update and verify your information by clicking the link below :
http://cgi3.ebay.com@reg-cgi.com/eBayISAPI.dll?...
Thank you very much for your cooperation!
eBay Customer Support
Remember: eBay will not ask you for sensitive personal information (such as your password, credit card and bank account numbers, social security number, etc.) in an email.
Copyright 1995 - 2004 eBay Inc. All rights reserved. Designated trademarks and brands are the property of their respective owners.
The same thing happens here. I submit my login information thinking that I’m logging into Ebay but instead I’m sending personal information to a phisher.
Be careful. Always verify the URI before you click on it. Ebay and PayPal always use a secure https:// site for user logins. A good rule is to never use the link provided in an eMail. Always go to the website yourself and login as you normally do.