|
Hey everyone,
This is a special This and That newsletter. A full one should be coming down
the pike shortly.
I want to remind everyone - NEVER, EVER
click on email links and fill out confidential information. Anyone can easily
"spoof" or forge a returned email address when sending you an email.
They can also easily copy the format of a website and design one which looks
just like the original. Here's my "real life" story of last night.
Last night, I got what I thought was a routine email from Pay Pal saying they
were updating my information. It told me to click on a link, which is show on
attachment. I clicked on link and it went to what looked just like a PayPal
page. I put my username and password in.
What I saw next set off all types of alarms and whistles.
1. As I've told everyone, time and time again, never give out any information
unless there is a little yellow lock at the bottom of the web page. In the
middle of this site there was a lock, but no lock on the bottom of the web
page.
2. They asked for all my information, name, address, social security number,
bank accounts and credit cards. I had a feeling Pay Pal would never do this.
3. The website address was www.paypalupdate.com
not www.paypal.com .
Actions I took immediately when I suspected fraud:
1) Went to www.paypal.com and changed my
password.
2) Called Pay Pal tech support and found they were closed - another good
indication that email was sent purposefully when they had closed.
3) I replied to the email and got it bounced back.
Bottom line, never, ever give any of your information out to anyone who calls
or emails you. You must initiate the call and even when you do this, never give
your credit card number or social security number unless you are 100% you
called the right company. Most reputable companies only ask for the last 4
digits of your credit card.
This proposed identity theft could have happened
with any company that has on-line transactions.
If you ever get a suspicious email that you think is coming from PayPal, send
email to: accessviolation@paypal.com
As an FYI, I've been using on-line transactions for over 8 years and have never
had my credit card used by anyone but me.
If you're interested, here are more details of how I uncovered this scandal.
The information at the top of my email was as follows:
X-POP3-Rcpt: clyde@itmcomputing.com
Date: 25 Sep 2002 04:54:47 -0000
To: clyde@itmcomputing.com
Subject: URGENT: PayPal Account Update
From: support@paypal.com
Reply-To: support@paypalupdate.com
X-Mailer: PayPal
You'll notice that the "reply-to" is not going to paypal, but
paypalupdate.com. This was my first clue something was wrong.
Additionally, when I moved my mouse over the link that said https://www.paypal.com , in the status bar
it said, www.paypalsys.com . These 2
links should always match.
************************
Hope you enjoyed the ride....
Clyde Lerner, In The Moment Computing
Phone: 408.732.8500
E-mail comments/feedback to: http://www.itmcomputing.com/contact_computer.php
This newsletter is a service of In The Moment Computing and is Copyright 2005 Clyde Lerner. All worldwide rights reserved. If forwarding, please forward all of e-mail, not any portion therein. To see past issues of This and That Computer Tips newsletter, please visit the web at: http://www.itmcomputing.com/newsletter.php and click on "Archives."
Please note: Unless requested, questions pertaining to this newsletter will be answered in a 3-4 week time frame. If you need a faster response, there will be a small consultation fee of $15 per e-mail response. You will receive a reply within 48 hours.
"Complete Computer Help (Networks, New Computer Installs, Software Training) for Individuals and Small Businesses"
"Designing your Perfect Website, at an Affordable Cost, in a Timely Manner"
Eliminate and Destroy unwanted email: http://spamarrest.com/affl?1337207
Send a greeting card through the Internet so recipient gets card in their postal mailbox: www.sendoutcards.com/7197 - let me walk you through how to send a card - it's easy.
©2002 In The Moment (ITM) Computing. All rights reserved.
|