Don't know if people are aware so I'm posting this on several forums.

Missus had an email today saying that they have limited her account as 3 attempted logins were failed. Neither of us have used the account for a few weeks.

So she clicked on the link to reset and it asked a security question.
"Please give card number, valid from date, expiry date and the card PIN number" WTF!!!!!! Why the **** is it asking for her pin number? There was then a link which explained that it was a new securtiy feature!!!! Yeah, because that's friggin secure isn't it

I then told her to open a separate web page and to open paypal in the browser and try to log in. She did this and it signed her in fine. So this email was a fake (even though it was received by email saying paypal with her log in username).

Please be warned!!!

 

standard phishing email mate

 

This is a common phishinh technique. Never open links on emails unless you are 100% sure you know where it has come from.

I recently had my email account hacked and susequently my ebay account and that is without responding to these phishing emails, so don't make it easy for them. Read up on the paypal security pages and there's some useful pointers on there about how to identify these emails.

 

Yeah we have done now. She never opens emails from people she doesn't know, but the fact it said the sender was paypal.

 

open the email as PLAIN TEXT only and you get to see all the hidden addresses and I can assure you that they will not be from Paypal.

In fact you should all set emails to be received as plain text only by default. It's a very simple but effective way of filtering this stuff. If you want to get a known email as HTML / Rich text you choose after viewing it.

 

I'm not up with IT so how would you open it as "plain text" fella?

 

Do NOT click on ANY of the links below!




For example - here's one I've just received:

http://www.lloydstsb.com/ib_demo/dda...IBL_banner.gif

Dear Customer


Lloyds TSB has a strict policy to ensure all of our customer's emails associated with their bank account's are confirmed. This is done for your protection because some of our customers no longer have access to their email address.

To sustain our quality services and secure usage of our online banking system, we require you to verify and confirm your permanent email address by following the reference given below:

Click Here To Verify Your Email Address http://vluvanita.net/home/lloydstsb/...stomer.ibc.htm

Email verification must be performed within 2 weeks from receiving this email. However, failure to comply will result in temporary account suspension and limited account activity until an account specialist can contact you regarding this error. This can be avoided simply by following our online verification link above.

We apologize for any inconvenience.

Yours sincerely

Bryan Fitzgerald
General Manager, Media

________________________________

Help http://help.lloydstsb.com/ltsb/defau...context=a106pw | LloydsTSB.com http://www.lloydstsb.com/


opened as plain text - look at the address you click on to verify your email address - that ain't Lloyds

Do you notice though that the banners ARE genuine ones....


As to opening as Plain text - it depends on what you use, so i can't help you there. I use MS Office 2007 with Outlook so the options are set there.

 

Okay no worries. I'll look into that one. Appreciate the help bud.

 

I had one from abbey national I don't even bank with them

 

Think that's who my other half had one off, or some other bank he doesn't use.

It seems to me (so far), if something is genuine, it tends to have your name as the 'dear whoever', whereas dodgy stuff tends to have 'dear your name'.

Don't take that as gospel, but it is something I have noticed moreso with people I actually have anything to do with (esp. ebay/paypal). We got caught out a while back with something from ebay or paypal (I forget which), and when we reported the problem, quickly, they were very helpful.

I'm not technically minded, just be careful out there, so many dodgy people about now.

 

Its worth forwarding any suspect emails to spoof@paypal.com too, you quickly get a reply back confirming it as a phishing scam.

Ive had some very realistic looking ones that many people would be fooled by.

 

Simple rule: any "security" e-mail which contains a link to click on is a fake. If it's genuine, then they will just tell you to log in as normal.


M

 

Paypal NEVER send emails! So any email is spam!

 

Yeah we reported it directly to paypal. The **** take is they then tried again an hour later pmsl.

 

Its fair warning to never follow any link from an email if its for anything to do with your bank, Credit card, Building society or any other company that may hold your card details (paypal, and some online shopping companies like eBuyer ).