PayPal Email - Phishing Scam

So this morning I got an email purportedly from PayPal with the title.. "-731253 Important Information about your Paypal Account" from "paypal-security6484@update-info343.com". Needless to say I was instantly suspicious and already convinced myself that this is a phishing scam but I continued to read the email anyway. The following is the email in it's entirety....

Due to the reasons listed below your Paypal account has been limited; Paypal is constantly working to ensure security with all Paypal accounts in our system. We have recently reviewed and for the reasons listed below it is necessary for you to confirm your account. We are sorry for the inconvenience but this is to insure the safety of Paypal customers and workers alike. Please confirm your account with the supplied link below to "continue use with your paypal account.

http://theepicone.net/paypal_update.html

-----------------------------------------

Why is my account access limited?
Your account access has been limited for the following reason(s):

* Unusual account activity has made it necessary to limit account access
Until additional verification information can be collected.

(Your case ID for this reason is PP-003-303-124.)
-----------------------------------------

Thanks,
Paypal Staff
Paypal.com

Now first off for those that do not know what "Phishing" is I give you the explanation from wikipedia...

"In the field of computer security, phishing is the criminally fraudulent process of attempting to acquire sensitive information such as usernames, passwords and credit card details by masquerading as a trustworthy entity in an electronic communication. Communications purporting to be from popular social web sites (YouTube, Facebook, MySpace, Windows Live Messenger), auction sites (eBay), online banks (Wells Fargo, Bank of America, Chase), online payment processors (PayPal), or IT Administrators (Yahoo, ISPs, corporate) are commonly used to lure the unsuspecting. Phishing is typically carried out by e-mail or instant messaging,^[1] and it often directs users to enter details at a fake website whose look and feel are almost identical to the legitimate one. Even when using server authentication, it may require skill to detect that the website is fake."

Some common sense things to look for or do when you get emails like this...

• Paypal or banks (and even sites like Facebook & Myspace) never send you emails where you need to click and confirm info. When you log into your paypal or bank account (or even Facebook) and something needs updating only then you will see an alert that something needs your attention right within your secure account also when it comes to banks they may mail you or call you and ask that you go in the bank in person to update something.
• Look at the link this email wants you to click it goes to a site that is not even Paypal, often this is a dead giveaway with any type of phishing scam taking you to a site that is clearly not the site in question or sometimes it's a little tricky and looks close but always pay careful attention.
• Pay attention to where the email is originating from sometimes you will see a sign that things are not right and a little suspicious.
• If you are ever in doubt email the company or website administrator or call the company in question directly and ask if they sent you this email before you take any action with it.
• GOOGLE IS YOUR FRIEND, if you ever get an email that asks you for personal info that needs updating or to reactivate an account.... always copy & paste the email title & or some of the email contents into Google and you will get all kinds of info if it's a scam because hundreds or thousands of others are getting the same phishing scam email as well and are discussing it. Also many security websites post about all such scams to alert the general public so always search Google for emails like this.
• Use Firefox 3 or later because of excellent built in phishing and malware protection features but keep in mind they are not foolproof and rely on the input and reporting from people like you & me who take internet security serious and want to protect others. See Firefox's description here about these security features. Actually if you have Firefox 3 or later and tried accessing the scam link in the email above you will be blocked from accessing the site because it's already flagged as a forgery, I LOVE FIREFOX!!!
  
• Always be extremely cautious and always treat such emails as scams first until proven otherwise.

The following are some links to other sites reporting this and or similar Paypal scams....

http://www.millersmiles.co.uk/search/PayPal
http://www.scambusters.org/paypalscam.html
http://www.pinoymoneytalk.com/2008/05/13/limited-paypal-account-fake-email/

I hope this blog entry has helped at least one person and made everyone else who reads it more aware of such scams! :)