Hey everyone,

This is a special This and That newsletter. A full one should be coming down the pike shortly.

I want to remind everyone - NEVER, EVER click on email links and fill out confidential information. Anyone can easily "spoof" or forge a returned email address when sending you an email. They can also easily copy the format of a website and design one which looks just like the original. Here's my "real life" story of last night.

Last night, I got what I thought was a routine email from Pay Pal saying they were updating my information. It told me to click on a link, which is show on attachment. I clicked on link and it went to what looked just like a PayPal page. I put my username and password in.

What I saw next set off all types of alarms and whistles.

1. As I've told everyone, time and time again, never give out any information unless there is a little yellow lock at the bottom of the web page. In the middle of this site there was a lock, but no lock on the bottom of the web page.

2. They asked for all my information, name, address, social security number, bank accounts and credit cards. I had a feeling Pay Pal would never do this.

3. The website address was www.paypalupdate.com not www.paypal.com .

Actions I took immediately when I suspected fraud:

1) Went to www.paypal.com and changed my password.
2) Called Pay Pal tech support and found they were closed - another good indication that email was sent purposefully when they had closed.
3) I replied to the email and got it bounced back.

Bottom line, never, ever give any of your information out to anyone who calls or emails you. You must initiate the call and even when you do this, never give your credit card number or social security number unless you are 100% you called the right company. Most reputable companies only ask for the last 4 digits of your credit card.

This proposed identity theft could have happened with any company that has on-line transactions.

If you ever get a suspicious email that you think is coming from PayPal, send email to: accessviolation@paypal.com

As an FYI, I've been using on-line transactions for over 8 years and have never had my credit card used by anyone but me.

If you're interested, here are more details of how I uncovered this scandal.

The information at the top of my email was as follows:

X-POP3-Rcpt: clyde@itmcomputing.com
Date: 25 Sep 2002 04:54:47 -0000
To: clyde@itmcomputing.com
Subject: URGENT: PayPal Account Update
From: support@paypal.com
Reply-To: support@paypalupdate.com
X-Mailer: PayPal

You'll notice that the "reply-to" is not going to paypal, but paypalupdate.com. This was my first clue something was wrong.

Additionally, when I moved my mouse over the link that said https://www.paypal.com , in the status bar it said, www.paypalsys.com . These 2 links should always match.

************************
Hope you enjoyed the ride....

Clyde Lerner, In The Moment Computing
Phone: 408.732.8500
E-mail comments/feedback to: http://www.itmcomputing.com/contact_computer.php

This newsletter is a service of In The Moment Computing and is Copyright 2005 Clyde Lerner. All worldwide rights reserved. If forwarding, please forward all of e-mail, not any portion therein. To see past issues of This and That Computer Tips newsletter, please visit the web at: http://www.itmcomputing.com/newsletter.php and click on "Archives."

Please note: Unless requested, questions pertaining to this newsletter will be answered in a 3-4 week time frame. If you need a faster response, there will be a small consultation fee of $15 per e-mail response. You will receive a reply within 48 hours.

"Complete Computer Help (Networks, New Computer Installs, Software Training) for Individuals and Small Businesses"
"Designing your Perfect Website, at an Affordable Cost, in a Timely Manner"

Eliminate and Destroy unwanted email: http://spamarrest.com/affl?1337207

Send a greeting card through the Internet so recipient gets card in their postal mailbox: www.sendoutcards.com/7197 - let me walk you through how to send a card - it's easy.

©2002 In The Moment (ITM) Computing. All rights reserved.