Neki dan sam mail dobio sljedećeg sadržaja:

Poslano sa adrese - Ova e-mail adresa je zaštićena od spam robota, nije vidljiva ako ste isključili JavaScript

"PayPal
Identity Issue PP-678-129-336
Secure Transaction

Please complete the attached form to verify your Profile information and restore your account access.
Personal Information Profile

Make sure you enter the information accurately, and according to the formats required.
Fill in all the required fields.

Dear customer ,

As part of our efforts to provide a safe and secure environment for the online community, we regularly screen account activity. Our review of your account has identified an issue regarding its safe use. We have placed a restriction on your account as a precaution.

To lift the restriction we will require some further information from you.

If, once we review your further information and we're confident that the use of your account does not present a safety risk to our service and customers, we'll be happy to reinstate your account.

We have sent you an attachment which contains all the necessary steps in order to restore your account access. Download and open it in your browser. After we have gathered the necessary information, you will regain full access to your account.

We thank you for your prompt attention to this matter.

Very sincerely,
PayPal Review Department "

U prilogu je nekakav link na koji bi trebao kliknuti (ali nisam niti ću !).

Sličan mail sam dobio već dva puta i pisao sam Paypalu da ih pitam o čemu se radi i da li to uopće šalju oni ili netko treći, ali nikada nisam dobio nikakav odgovor.
Inače mi Paypal radi bez ikakvih problema.

Meni ovo smrdi!

Mislim da ti je to pišing koji sam zamalo popušio. Preusmjeri mail na PayPal police i prijavi pa nek love smutljivce.

Don't respond to emails asking for your account information.

Spoof and phishing (pronounced "fishing") are the terms coined to describe emails made to look like they've come from legitimate companies but that actually come from identity thieves. These emails warn you of account problems or other urgent issues to trick you into clicking through to a scam website. The scam website asks you to enter your user name and password or other account information. Once you do this, you've given your information to someone who might use it to do you harm.

PayPal will never ask you to enter your password or financial information in an email or send such information in an email. You should only share information about your account once you have logged in to www.paypal.com/ directly from your browser.

Jedine službene adrese od paypala su @paypal.com. Sve drugo je lažno, bez obzira na to koliko autentično izgledali mailovi. Baš smo neki dan imali sličnu temu.

To je definitivno mamac za naivne. I ja sam bio dobio e-mail sličnog sadržaja, pa sam prvo otišao na svoj PayPal račun provjeriti o čemu se radi i odmah vidio da se radi o bačenoj udici.

Paypal je odgovorio, radi se o phishingu:

"Thank you for taking the time to forward this suspicious email to us. It is a fake email and was not sent by PayPal.

These emails often link to fake PayPal websites, also known as spoof sites. These fake websites try to get you to enter personal information (for example, credit card numbers, PIN numbers and passwords).

We continuously work to disable the links and websites associated with phishing emails.

If you replied to the fake email with financial or personal information, or you entered personal information on a fake website:

Change your PayPal password and security questions immediately.
Contact your bank or the company that issued the credit card or debit card on your PayPal account and tell them about the situation.
Review your PayPal transaction history to make sure there are no unauthorised transactions for your account.
To learn more about phishing and online safety, log in to your account and click ‘Security Center’ at the top of any PayPal page. We continuously work to disable these emails and websites.

In addition to following the above safety tips, you can download Iconix Email Identification. Iconix have developed software that helps to protect you from fraudulent emails by confirming whether you received a legitimate PayPal email.

You can download this software for free by clicking a button on our website. After Iconix has been installed, you will see an Iconix icon (a gold lock with a tick) whenever you receive an authentic email from PayPal. It works with most of the major email services.

For more information on Iconix:

Go to www.paypal.com and log in to your account.
Click 'Security Center'.
Click 'Security Tools' near the bottom of the page.
Click 'Find out more' under Iconix'.
Fake emails, also known as phishing emails, attempt to collect your personal and financial information. These fake emails often link to fake websites that encourage you to enter personal information (for example, credit card numbers, passport or driving licence number, and account passwords).

You’ll know that an email is not from PayPal when:

The email uses a generic greeting like ‘Dear user’ or ‘Hello, PayPal member.’ We always address you by your first name and last name or the business name on your PayPal account.
The email requests financial and other personal information. For example, an email from PayPal never asks for the numbers of your bank account, debit or credit card, or driver’s license. We also don’t request your email addresses, your full name, your account password, or the answers to your PayPal security questions.
The email includes an attachment or a software update to install on your computer.
If you think you’ve received a phishing email, forward it to Ova e-mail adresa je zaštićena od spam robota, nije vidljiva ako ste isključili JavaScript . Then delete the fake email from your inbox.

To learn more about fake emails or websites and online safety, log in to your account and click ‘Security Center’.

Please let us know if you require any further assistance.

Sincerely,
Bharat
PayPal"

Dakle, sve takve mailove treba proslijediti na Ova e-mail adresa je zaštićena od spam robota, nije vidljiva ako ste isključili JavaScript .

Evo i meni je danas stigao mail od lažnog paypala.
Ono što me zabrinjava je što su mi se obratili mojim punim imenom i prezimenom.
Prijavio sam mail paypalu, primili ga i potvrdili da je u pitanju prevara.
Mail sam dobio sa adrese paypal(at)e.paypal com

i ja ga dobio prije sat vremena. bit će da im je danas dan.

I ja dobio sa iste adrese. A vrag jos i zna da mi je prijavljena kreditna istekla?! Ko je tu lud?

Jesu se i vama obratili sa vašim imenom i prezimenom?

i meni je stigao kao i tebi s iste adrese, na koji link na ih prijavim?

Proslijedi mail na: Ova e-mail adresa je zaštićena od spam robota, nije vidljiva ako ste isključili JavaScript

I ja sam ga dobio danas, s te adrese. To je inače autentična adresa. Provjerio sam i raw headers, stvarno je poslan s paypal servera. I mail mi djeluje kompletno autentično, link vodi na paypal stranicu, ne na man in the middle spoof site. Jedino što mi je bilo sumnjivo je to što mi nude link "check your recent activity" (što nikad do sad nisu). Ne piše ništa od onih standardnih physhyng navlakuša. Sve najautentičnije moguće. Sad više nisam siguran da li su oni uveli neku novu uslugu ili im je netko hacknuo servere pa se još ne usuđuju nikom to objaviti.
Što piše u vašim mailovima? Moj počinje sa:

Hello Emil Prpic,

Thanks for being a loyal customer this month! Below you will find recent news about your account.

Check your recent transaction activity by logging in now.

Došlo je i meni pa sam kopirao donji dio poruke.

Isti slucaj kod mene, fwd sam mail te dobio sljedeci odgovor:

"Hello Kristian Karlovic,
Thanks for forwarding that suspicious-looking email. You're right - it
was a phishing attempt, and we're working on stopping the fraud. By
reporting the problem, you've made a difference!
Identity thieves try to trick you into revealing your password or other
personal information through phishing emails and fake websites. To learn
more about online safety, click "Security Center" on any PayPal webpage.
Every email counts. When you forward suspicious-looking emails to
Ova e-mail adresa je zaštićena od spam robota, nije vidljiva ako ste isključili JavaScript , you help keep yourself and others safe from identity
theft.
Your account security is very important to us, so we appreciate your
extra effort.
Thanks,
PayPal"

Bome, onda je najbolji kojeg sam do sad vidio.
A oni itekako imaju što objašnjavati - kako je netko pokupio podatke o imenu i prezimenu korisnika? To znači nije nasumično slano svima, nego je točno naciljano paypal korisnicima?
Ajde još jedan test. Moja mail adresa na koju mi je stigao taj mail je takva da ima oblik ime.prezime@nešto. Možda su išli samo na to da pretpostave da je to s lijeve strane monkeya ime.prezime? Da li je netko dobio taj mail, da su ga oslovili po imenu i prezimenu, ali da mu je poslano na mail adresu iz koje se ime i prezime ne da skužiti?

I ja sam danas dobio poruku s ove adrese
Ova e-mail adresa je zaštićena od spam robota, nije vidljiva ako ste isključili JavaScript .
We noticed that you have not shopped with us yet!

Next time you shop, speed through checkout with PayPal. To make a purchase, just enter your email and password. There is no need to retype your financial information since it is safely stored in your PayPal account.

Login now and make sure your account is up to date.
Nisam koristio Paypal kao sto i sami govore pa nemam sto provjeravati. Izbrisat cu to
Poslano je na ime.prezime@ gmail.com

"Hello Denis Roncevic,

Thanks for being a loyal customer this month! Below you will find recent news about your account.

Check your recent transaction activity by logging in now."

-poslano na mail ime.prezime@nesto...
da cujemo ostale...

"Hello Dražen Đuroković,
We noticed that you have not shopped with us yet!... bla... bla..."

Poslano na gjuroo@nešto... Dakle, nema veze s imenom, prezimenom.

Kad sam kreirao PayPal račun, dobio sam mail sa adrese "service [at] intl.paypal.com", a ne ove "e.paypal". Usto, ovaj današnji mail mi izgleda preraskošno za PayPal. Oni obično imaju one spartanski dizajnirane poruke.

Na dnu 'raskošne' poruke piše i ovo:
"This email was sent to gjuroo [at] nešto.com, because your email preferences are set to receive Partner/Third Party Promotions. Click here to unsubscribe."

Ne budi mi teško, otišao sam na svoj PayPal profil i tamo je pod "Notifications" uistinu označen checkbox pored "PARTNER MARKETING / Receive PayPal merchant and partner offers." Sad sam ga odcheckirao. Možda je u tome caka.

Također sam dobio isti mail.
Sad baš upoređujem i nikako ne mogu otkriti razlike između prijašnjih mailova koji su mi stizali sa paypal i ovog, samo što nikad prije nije pisalo "login now and make sure your account is updated" i nije bilo navođenja ovog unesi mail i password...

Prije ovog zadnji mail od paypala sam dobio 13.9 o paypal user agreement, također je bio ovaj @e.paypal dok kod transakcija i javljanja o isteku kartice mail sam uvijek dobijao sa @intl.paypal?!

Nešt mi ovde smrdi kod svega ovoga?!

View your recent activity – January 2014

Hello Dragan Lovric,

We miss you! We’ve noticed that you have not shopped with us much recently.

Next time you shop, speed through checkout with PayPal! To make a purchase, all you need to do is enter your email and password.

Login now and make sure your account is up to date.



Email adresa je gmail i nije puno ime i prezime.

I dobro, naravoučenje je?
Ja nemam otvoren račun na Paypal-u, ali me zanima ishod.
lp

Ja sam dobio isto jučer taj mail i odmah je završio u smeću. Kao što je gjuroo rekao, prešareno i domena e.paypal.com su dead giveaway. Lame.

Za svaki slučaj promijenio sam pass, nije bilo nikakvog prometa zabilježenog po accountu.

FYI,
i ja sam sinoc dobio sporni mail.

Moja email adresa nema nikakve veze sa mojim imenom i prezimenom, odakle im onda moji podaci?

Ja za sada nisam dobio mail takvog sadržaja iako imam PayPal račun. Možda je to zato jer sam prije jedno tjedan dana obnovio svoje podatke? Javim ako međuvremenu što dođe.

I ja tokom noći dobio navedeni mail, odmah sam ga obrisao a nakon toga otišao na paypal stranice i obrisao kreditnu karticu (koja je istekla još prošle godine) jer ga uopće više ne koristim. Mail je došao sa Ova e-mail adresa je zaštićena od spam robota, nije vidljiva ako ste isključili JavaScript na Ova e-mail adresa je zaštićena od spam robota, nije vidljiva ako ste isključili JavaScript . Također je mail izgledao prešareno...

smayoo kaže:


Hello Tonci Kucic,

We miss you! We’ve noticed that you have not shopped with us much recently.

Next time you shop, speed through checkout with PayPal! To make a purchase, all you need to do is enter your email and password.

Login now and make sure your account is up to date.

Registrirana PayPal mail adresa ne sadrži podatke o imenu i prezimenu, a dobiveni mail je poslan sa adrese Ova e-mail adresa je zaštićena od spam robota, nije vidljiva ako ste isključili JavaScript .

I kod mene isto, vanja@ je mail, tako da...

Moguće da ima veze kako je netko rekao sa "Partnerima" - pa se otelo nadzoru...

I ja sam ga isto dobio... Odmah mi je bio sumnjiv jer njihova stranica, barem do sada, nikad nije izgledala tako...
Isto sam primjetio da stranica na koju me link iz maila odveo u adress baru nema https i zeleni lokot što pravi paypal uvijek ima...