This afternoon I received an e-mail, through a paypal server, or so I thought. In the e-mail it told me that I had added a new e-mail address laptopsellers@yahoo.com So I immediately freak out, because of my account setup in paypal, anyone having access to my paypal account, also has access to my bank account (direct payment system) So I read through the e-mail and see a link, above the link it reads: If you did not authorize this change or if you need assistance with

your account, please contact PayPal customer service at:



then it has a hyperlink for you to follow. So knowing I already have a window open for paypal I go into my profile and see that no e-mail addresses have been added. So I click the link provided to check out what to do through customer service again. when the link opens it asks you to type in your logon, and password, normally my user name is in the field when I navagate through any of the paypal e-mails, so I begin to type it in, when I look up and check to see if this is even a paypal address, and it looks legitimate, except there is not a httpS in the address bar, so a quick glance down shows that this is not a secure page, well I am not about to enter the password and hit submit at this point.



So I go back tot he other window and get a phone number to the customer service line @ Paypal, I call, spend 10 minutes listening to menu's before I am finally able to get to an agent and explain what I am finding in this e-mail, before I even get to tell him the e-mail address that has been added, he tells it to me over the phone, and tells me to change all of the password/special question information just to be safe.



So heed my words. If you happen to get an e-mail like this, DO NOT try to login using the link provided in the e-mail, it will send the information you input back to the individual that sent the e-mail and they will be able to login to your account and wipe you clean





Good Luck

 

thanks for the info mangs, ill be on zee lookout!

 

Thanks dude I'll watch out!

 

Thanks a bunch man, i was just about to go buying a bunch of stuff via paypal too.

 

Yeah. I had a friend stupid enough to respond to a email with his social, address, full name, bank account number and login for paypal and his bank. He called his bank after he called me and I told him it was bullshit. none of the websites ask you for all that info. Found out someone tried to withdraw $670 out of his account but bank of america stopped the transaction because it seemed like a fraud. (something about a bogus bank requesting a transfer)

 

thanks!

 

Woah smart bank



I didn't figure they would be on their toes like that..

 

good lookin out

 

good ol' phishing scams... bunch of scumbags

 

Thanks for the warning bro.