What is Spoof?
A spoof or phishing (pronounced "fishing") email is an email that is designed to look like it comes from a well-known company and that tells some story to get you to click a link or button in the email.
The links or buttons in the email take you to a website that is also called a "spoof" because it, too, fakes the appearance of a popular website or company. The spoof site asks you to input personal information, such as your credit card number, Social Security number or account password.
You think you are giving information to a trusted company, when in fact, you are supplying it to a criminal.
Common deceptive tactics of spoof emails and websites.
The following pages will help you prevent falling for a spoof email and protect your account. The lessons learned here can be applied not only on PayPal, but wherever you do business online.
Think an email is a spoof? Forward it to spoof@paypal.com.
Example:
Header:
----- Forwarded Message -----
From Support PayPal Thu Aug 27 15:09:16 2015X-Apparently-To: xxxxxxxx@yahoo.com; Thu, 27 Aug 2015 15:09:19 +0000Return-Path: <nobody@scuderia.turboservers.com.au>Received-SPF: none (domain of scuderia.turboservers.com.au does not designate permitted sender hosts) YXNlIGRvIG5vdCByZXBseSDCoMKgIEluZm9ybWF0aW9uIGFib3V0IHlvdXIg YWNjb3VudCA6IFdhcm5pbmchIFlvdXIgUGF5UGFsIGFjY291bnQgd2FzIGxp bWl0ZWQhIFlvdXIgYWNjb3VudCBoYXMgYmVlbiBsaW1pdGVkIHRlbXBvcmFy aWx5IGluIG9yZGVyIHRvIHByb3RlY3QgaXQuIFRoZSBhY2NvdW50IHdpbGwg Y29udGludWUgdG8gYmUgbGltaXRlZCB1bnRpbCBpdCBpcyBhcAEwAQEBAQ--X-YMailISG: i78U_IUWLDsBeY6LUkiwkQ0ra_fpWANyz7IPfyA3KRLpl3i9 PUNoBQXo5j3fiCqgCK7vuxC1ufbjmqO7z34TGJohKjbJseqQSc99EmJCbu4v v5DfhzqX68Iv5uOL8oj99DBKZQ2Dv65aaLQZ397vklFRuPSucO_wOjDFjdgr P6YB2.31Kdrz6JwPWmGEhFecl.ex2R7mjZKtTgInqGiP.0gdvu0RXy0aBahU YB7fFoTgaPVdPOq7OiUVt_Yz486eMxAM_QBiifmDOv84lN_NxRimBO.CzVL3 EOdkRrHEOK9VF_LHodX1kp0W6XN_h8oHYuVz..0JwwIh1hoPUgOgaAdrrJtu faj_.T_EPW2JRke83v1B_qPNZhn7jPOmAqfa8ae9oP7vj.SdzYlfHSkqmu92 _VAHv1MY9o.cKOOWJttvErSVvjOBP8CuK4NxCSSULZMODpHdFyMcV18BrD5P nLiXeCxnWZTcwI696Feq3rgrBCD4iVbstay5bAqcO0W.jowQJKKU73H6fXHX cZjecRX9125F9uttLh3IVCQ2bjHIcUJ8ajffW5HCxHcYNRRsII8XIMmRVAie W7OKsisHUqsNx.EOHWSYVsoc_FbxpxW6Q_X4ji9VQ3zhecA7BA402KACxy5b G8Ga995uOLcRJqf5GKK_voH2n1.WD2PeoHs5dtD2sPMMIhx9VZDudMi3DSZ1 tHPNmA4pYRHoUkhyA.QbezQt6Yco62LPkwsZ3pV3LAYA5rnQCwEdbQWSWrkw 7EX6b3jJqdMMbG3WHTGkF1ijIHx6sXZBcBzK2UtCT1zGUck_ad_VmwbwpHyt h33VDaWck.J3Tbh5nC3gIvKcWnpl8wCYT.Whi6_No2r5WRL6LueoUTKd8KCy aO8xZrQpXMyPs613LW48_GGg9Aa5.GgSGs2pE0oKqAZl6uCDtu6f_dvTp0MG n5MNMQakCUg8aO6o8EfXndnIiFdFkAMgqi9NXvBmOYE86zUBexIsNn_qsdjX 86oqN.egJkktJxLMK.GGfBNWm8yXjcrQXGek7yVe3v9pBj93m1wITBikJR6o H3TstXdfM91v26EfCrQNdgGHGleqqJhgTid109u7jN.LwAUdk33C4.jqtHu_ 7AFMCRz3p6tEQjA5kLC8xlV6GC44LEjsyhe.p5LNRTAMf9YxFD5fk.TI8MXb zEgeusfvW9bjuDIYARwKB9XuFrUn4MwdRmu6FZT6PsUw1AiYCIbG8aEZcHPq NITWWoPujdkPnDl900Ue1tEqkrswKQ1WGdh6jNM9C.qoh6uIyA6lcl5MZTc5 sfsU2X.ZlH5ODqydxAuw875QBpVAVHkS2Bp2.fctia9_X-Originating-IP: [122.201.93.135]Authentication-Results: mta1383.mail.gq1.yahoo.com from=support.com; domainkeys=neutral (no sig); from=support.com; dkim=neutral (no sig)Received: from 127.0.0.1 (EHLO scuderia.turboservers.com.au) (122.201.93.135) by mta1383.mail.gq1.yahoo.com with SMTPS; Thu, 27 Aug 2015 15:09:18 +0000Received: from nobody by scuderia.turboservers.com.au with local (Exim 4.69) (envelope-from <nobody@scuderia.turboservers.com.au>) id 1ZUynk-00077o-1u for xxxxxxxxxxxxxxxx@yahoo.com; Fri, 28 Aug 2015 01:09:16 +1000To: xxxxxxxxx@yahoo.comSubject: [Warningl ] Your PayPal Account Has Been Suspended =?utf-8?Q?=E2=9C=94?=X-PHP-Script: scuderia.turboservers.com.au/~aquapro/morpema/spa.php for 41.248.33.19From: Support PayPal <inc.paypal@support.com>Reply-To: inc.paypal@support.comMIME-Version: 1.0Content-Type: text/htmlContent-Transfer-Encoding: 8bitMessage-Id: <E1ZUynk-00077o-1u@scuderia.turboservers.com.au>Date: Fri, 28 Aug 2015 01:09:16 +1000X-AntiAbuse: This header was added to track abuse, please include it with any abuse reportX-AntiAbuse: Primary Hostname - scuderia.turboservers.com.auX-AntiAbuse: Original Domain - yahoo.comX-AntiAbuse: Originator/Caller UID/GID - [99 32002] / [47 12]X-AntiAbuse: Sender Address Domain - scuderia.turboservers.com.auX-Source: X-Source-Args: /usr/local/apache/bin/httpd -DSSL X-Source-Dir: vinidexaquapro.com.au:/public_html/morpemaContent-Length: 12104From: Support PayPal <inc.paypal@support.com>To: xxxxxxxxxxxx@yahoo.com Sent: Thursday, August 27, 2015 8:09 AMSubject: [Warningl ] Your PayPal Account Has Been Suspended ✔
PayPal
This is an automated email, please do not reply
| |
Your account has been limited temporarily in order to protect it. The account will continue to be limited until it is approved.
Once you have updated your account records, your information will be confirmed and your account will start to work as normal once again. The process does not take more than 5 minutes. Once connected, follow the steps to activate your account. We appreciate your understanding as we work to ensure security. |
Note: We have a problem with servers, if you have received this message in Folder SPAM (JUNK ) move it to your inbox to unlock the link.
|
Suggestion!