Those involved in online trading or buying and online auctions would probably be interested to know about a new fraud attempt involving Paypal and using the phfishing technique.
The new scheme is quite different from those exposed in the past (such as e-mails requiring that user confirm PayPal registration details and then directing unsuspected users to a fake PayPal site). In the new scheme, users are getting e-mails informing that they have just paid an excess of USD 100-150 from their PayPal accounts for goods like Rolex replica watches, and offering a link where users can supposedly "debate" the transaction. Needless to say the e-mail graphics does its best to reproduce PayPal graphics and that the links are taking users to fake sites designed to learn their names, PayPal passwords and other sensitive data.
There are two very easy methods to recognize a fake PayPal email:
- Right-click on e-mail headline, then choose "Properties" which would give you a very good idea where mail really came from;
- A fake PayPal e-mail most likely would not address you by your name such as real PayPal e-mail would and would include a link or a window to fill in details.
And if still in doubt a perfect way to avoid trouble is to open a new browser, securely log into your PayPal account and verify that it is in order.