[IP] POSSIBLE (likely) fraudalent PayPal scam - net community awareness warranted

[Dave Farber <dave@farber.net>]

Title: approve:tippie POSSIBLE (likely) fraudalent PayPal scam - net community awareness warranted

------ Forwarded Message
From: paul foldes <pfoldes@interhelp.com>
Date: Wed, 05 Mar 2003 17:58:20 -0500
To: dave@farber.net
Subject: fraudalent PayPal scam - net community awareness warranted

Dave, 

this is the second putative PayPal notification I have received today. 

It is a scam. Paypal/ebay has not responded to my attempt to contact them to alert them.

Both spam/scam emails were directed to email addresses that were either: 1) scrubbed off the web, or 2) purchased or 3) stolen from network solutions domain registration database ... as neither of these address were my legitimate paypal addresses....and one of the addresses was provided by me only to network solutions as way to trace whether they sold my domain reg info

this is a scam, as it request via reply unencrypted email bank account info

I tried to notify ebay/paypal by sending warning to their postmaster....but having not received any response for over 5 hours, thought it might be best if the warning went out over your maillist, as it is read by knowledgeable people

best, 
paul foldes
voice 703 370 0009 if you want to voice verify

NOTE: my personally identifiable legitimate info has been xxx out below
routing info of the incoming email intact otherwise

Return-path: <650n0j458@encorewire.com>
Received: from bright08. (bright08-qfe0.icomcast.net [172.20.4.65])
 by msgstore01.icomcast.net
 (iPlanet Messaging Server 5.2 HotFix 1.12 (built Feb 13 2003))
 with ESMTP id <0HBA00CC8CIJSR@msgstore01.icomcast.net> for
 xxxx@ims-ms-daemon; Wed, 05 Mar 2003 11:59:07 -0500 (EST)
Received: from mtain08 (bright-LB.icomcast.net [172.20.3.155])
        by bright08. (8.12.8/8.11.6) with ESMTP id h25GvExR024738       for
 <@msgstore01.icomcast.net:xxxx@comcast.net>; Wed,
 05 Mar 2003 11:59:11 -0500 (EST)
Received: from xxx my domain host company forwarder )
 by mtain08.icomcast.net
 (iPlanet Messaging Server 5.2 HotFix 1.12 (built Feb 13 2003))
 with ESMTP id <0HBA00KN3CI6JW@mtain08.icomcast.net> for
 xxx@comcast.net (ORCPT xxx@comcast.net); Wed,
 05 Mar 2003 11:58:54 -0500 (EST)
Received: from cpe00a0cce13fa0-cm400026330865.cpe.net.cable.rogers.com
 ([24.114.9.27] helo=24.114.9.27)       by xxx my domain host provider with smtp
 (Exim 3.36 #1) id 18qcEO-0001bH-00     for clientname provided netsol@domain provided netsol.com; Wed,
 05 Mar 2003 11:59:00 -0500
Date: Wed, 05 Mar 2003 13:09:44 -0600
From: info@paypal.com
Subject: Your PayPal account is Limited.
To: clientsaddressprovided netsol@domainprovided netsol.com
Message-id: <235574@paypal.com>
MIME-version: 1.0
X-Mailer: Mozilla 4.08 [en] (X11; U; UnixWare 5 i386)
Content-type: text/html; charset=us-ascii
Content-transfer-encoding: 8bit
X-AntiAbuse: This header was added to track abuse,
 please include it with any abuse report
X-AntiAbuse: Primary Hostname - my domain host
X-AntiAbuse: Original Domain - xxx my domain
X-AntiAbuse: Originator/Caller UID/GID - [0 0] / [0 0]
X-AntiAbuse: Sender Address Domain - encorewire.com
Original-recipient: rfc822;xxx@comcast.net

---

<https://www.paypal.com/>  


Dear PayPal Customer

 
PayPal is currently performing regular maintenance of our security measures. Your account has been randomly selected for this maintenance, and placed on Limited Access status. Protecting the security of your PayPal account is our primary concern, and we apologize for any inconvenience this may cause.

To restore your account to its regular status, you must confirm your email address by logging in to your PayPal account using the form below:
Email Address:
Password:

Bank Account

Enter Bank Account #:

Credit Card

Enter Credit Card #:
Exp. date : 01 02 03 04 05 06 07 08 09 10 11 12 / 03 04 05 06 07


This notification expires March 31, 2003

Thanks for using PayPal!

This PayPal notification was sent to your mailbox. Your PayPal account is set up to receive the PayPal Periodical newsletter and product updates when you create your account. To modify your notification preferences and unsubscribe, go to https://www.paypal.com/PREFS-NOTI and log in to your account. Changes to your preferences may take several days to be reflected in our mailings. Replies to this email will not be processed.

If you previously asked to be excluded from Providian product offerings and solicitations, they apologize for this e-mail. Every effort was made to ensure that you were excluded from this e-mail. If you do not wish to receive promotional e-mail from Providian, go to http://removeme.providian.com/ <http://removeme.providian.com/?cnum=pp710402> .

Copyright© 2002 PayPal Inc. All rights reserved. Designated trademarks and brands are the property of their respective owners.

------ End of Forwarded Message