First off it came to the wrong email address for my PayPal account, but still it looked real. I didn't fall for clicking the link. (which is ilabph dot com/pSG1s2xs/index.html a place which no doubt will ask you to log in and try to steal your PayPal account information and password. Usually hijacked server, so it's not tracable. I didn't go there!)


upload images

But the natural tendency for people is click the link, because What The Heck, I didn't send someone a payment... Hooked, they got you.

Same with the latest "free Dell computer" click the link for shipping information. Or UPS or FedEx "unable to deliver"... , click the link for tracking information. And it's a zip file in both cases, which installs a virus into your system. Nasty little creeps.

General rule, if suspicious, go to the site from your normal bookmark, never from the message alert or payment notice.

Just thought this was interesting because it's a new version of an old one.

Always worth reinforcing the warning. Thanks.

Maybe I'm just reminding myself, I almost clicked it. 

Part of the hook is catching us with "your payment was just sent" and I go into, what I didn't buy anything, what do they mean payment sent?

Oops, calm down Pete, it's a fraud.   

I have never seen such a message. But over time I will perhaps got one, so I have a question:
It seems that you can get a message from Paypal that you sent a payment to someone(which you didn’t) and when doing nothing with this message nothing further happened? 

This can indeed not often enough be said:

Quote

General rule, if suspicious, go to the site from your normal bookmark, never from the message alert or payment notice.

It wasn't to my account, or my email, the name was wrong and it wasn't from PayPal. It was faked to look like a PayPal message with the return address spoofed. (faked)

So actually, no you can't get a message from the real PayPal, but you can get one that looks like it is.

Good point, mine said from "notify@paypal.com" so it appeared to be them. Always hover over a link if there's any suspicion and you'll see where it's trying to take you.

Funny thing, now that you asked, real messages about payments, transfers and that come from service@paypal.com not "notify" interesting.

I love the first name - EULA - pretty funny. That should be a clue at least to some right there.

It's also important to forward fraudulent messages like this to spoof@paypal.com.  They agressively pursue these types of people and phishing web sites.  PayPal will respond with a message confirming that it is or isn't a message from them.  I've done it many times.