POSSIBLE (likely) fraudalent PayPal scam - net community awareness warranted

[Dave Farber <dave () farber net>]

------ Forwarded Message
From: paul foldes <pfoldes () interhelp com>
Date: Wed, 05 Mar 2003 17:58:20 -0500
To: dave () farber net
Subject: fraudalent PayPal scam - net community awareness warranted

Dave, 

this is the second putative PayPal notification I have received today.

It is a scam. Paypal/ebay has not responded to my attempt to contact them to
alert them.

Both spam/scam emails were directed to email addresses that were either: 1)
scrubbed off the web, or 2) purchased or 3) stolen from network solutions
domain registration database ... as neither of these address were my
legitimate paypal addresses....and one of the addresses was provided by me
only to network solutions as way to trace whether they sold my domain reg
info

this is a scam, as it request via reply unencrypted email bank account info

I tried to notify ebay/paypal by sending warning to their postmaster....but
having not received any response for over 5 hours, thought it might be best
if the warning went out over your maillist, as it is read by knowledgeable
people

best, 
paul foldes
voice 703 370 0009 if you want to voice verify

NOTE: my personally identifiable legitimate info has been xxx out below
routing info of the incoming email intact otherwise

> Return-path: <650n0j458 () encorewire com>
> Received: from bright08. (bright08-qfe0.icomcast.net [172.20.4.65])
>  by msgstore01.icomcast.net
>  (iPlanet Messaging Server 5.2 HotFix 1.12 (built Feb 13 2003))
>  with ESMTP id <0HBA00CC8CIJSR () msgstore01 icomcast net> for
>  xxxx@ims-ms-daemon; Wed, 05 Mar 2003 11:59:07 -0500 (EST)
> Received: from mtain08 (bright-LB.icomcast.net [172.20.3.155])
>         by bright08. (8.12.8/8.11.6) with ESMTP id h25GvExR024738       for
>  <@msgstore01.icomcast.net:xxxx () comcast net>; Wed,
>  05 Mar 2003 11:59:11 -0500 (EST)
> Received: from xxx my domain host company forwarder )
>  by mtain08.icomcast.net
>  (iPlanet Messaging Server 5.2 HotFix 1.12 (built Feb 13 2003))
>  with ESMTP id <0HBA00KN3CI6JW () mtain08 icomcast net> for
>  xxx () comcast net (ORCPT xxx () comcast net); Wed,
>  05 Mar 2003 11:58:54 -0500 (EST)
> Received: from cpe00a0cce13fa0-cm400026330865.cpe.net.cable.rogers.com
>  ([24.114.9.27] helo=24.114.9.27)       by xxx my domain host provider with
> smtp
>  (Exim 3.36 #1) id 18qcEO-0001bH-00     for clientname provided netsol@domain
> provided netsol.com; Wed,
>  05 Mar 2003 11:59:00 -0500
> Date: Wed, 05 Mar 2003 13:09:44 -0600
> From: info () paypal com
> Subject: Your PayPal account is Limited.
> To: clientsaddressprovided netsol@domainprovided netsol.com
> Message-id: <235574 () paypal com>
> MIME-version: 1.0
> X-Mailer: Mozilla 4.08 [en] (X11; U; UnixWare 5 i386)
> Content-type: text/html; charset=us-ascii
> Content-transfer-encoding: 8bit
> X-AntiAbuse: This header was added to track abuse,
>  please include it with any abuse report
> X-AntiAbuse: Primary Hostname - my domain host
> X-AntiAbuse: Original Domain - xxx my domain
> X-AntiAbuse: Originator/Caller UID/GID - [0 0] / [0 0]
> X-AntiAbuse: Sender Address Domain - encorewire.com
> Original-recipient: rfc822;xxx () comcast net
>
>
>  <https://www.paypal.com/>
>  
>  
> Dear PayPal Customer
>
>  
> PayPal is currently performing regular maintenance of our security measures.
> Your account has been randomly selected for this maintenance, and placed on
> Limited Access status. Protecting the security of your PayPal account is our
> primary concern, and we apologize for any inconvenience this may cause.
>
> To restore your account to its regular status, you must confirm your email
> address by logging in to your PayPal account using the form below:
> Email Address: 
> Password: 
>
> Bank Account
>
> Enter Bank Account #:
>
> Credit Card
>
> Enter Credit Card #:
> Exp. date : 01 02 03 04 05 06 07 08 09 10 11 12 / 03 04 05 06 07
>
>
> This notification expires March 31, 2003
>
> Thanks for using PayPal!
>  
> This PayPal notification was sent to your mailbox. Your PayPal account is set
> up to receive the PayPal Periodical newsletter and product updates when you
> create your account. To modify your notification preferences and unsubscribe,
> go to https://www.paypal.com/PREFS-NOTI and log in to your account. Changes to
> your preferences may take several days to be reflected in our mailings.
> Replies to this email will not be processed.
>
> If you previously asked to be excluded from Providian product offerings and
> solicitations, they apologize for this e-mail. Every effort was made to ensure
> that you were excluded from this e-mail. If you do not wish to receive
> promotional e-mail from Providian, go to http://removeme.providian.com/
> <http://removeme.providian.com/?cnum=pp710402> .
>
> Copyright© 2002 PayPal Inc. All rights reserved. Designated trademarks and
> brands are the property of their respective owners.


------ End of Forwarded Message

-------------------------------------
You are subscribed as interesting-people () lists elistx com
To manage your subscription, go to
  http://v2.listbox.com/member/?listname=ip

Archives at: http://www.interesting-people.org/archives/interesting-people/