I get a LOT of spam emails - phishing trips by people looking to steal my identity - asking me to confirm my details with the likes of E-bay, Paypal and half the banks in the world. The idea of the spammers is that you go on to what looks like the company's site to confirm you details but really you're on their site - with the same buttons, look and feel that you may be used to - and by submitting your login information you're giving them access.

There's a similar scam - I've seen before but suddenly had a batch in the last 24 hours - which tells me about a Paypal transaction I'm said to have made, and asks me to dispute the transaction if I don't agree it. This is likely to be an attempt at identity theft - a phishing trip - too and you should NOT follow any of the links offered.

Here is what my sample looked like.



My advise is to ignore these emails, but I'm slightly concerned in offering that advise as it's highly unlikrly, but possible, that such an email could be providing you with a warning that someone has already got into your account. You must make your own decision what to do (this is my "limitation of liablilty" statement!!).

Personally, if in doubt I "view raw source" and / or "complete headers" of the email and look for clues such as

Received: from apache by sv1.pacificasia.com.sg with local (Exim 4.60) (envelope-from ) id 1GM78A-0003LT-FD for info@wellho.net; Sun, 10 Sep 2006 02:00:38 +0800

as the last "received" header which tell me that the message cam from Singapore and

<a href="http://203.115.31.108/Sea%20Level/.www.paypal.com/us/login_secure/"><span class="ppem106">Dispute Transaction</span></a>

as the HTML that created the "Dispute Transaction" button ... the numbered IP address is clearly wrong (but beware - this button could have a rogue named server similar to Paypal's).

If still in doubt and you really feel you need to contact Paypal, do so by connecting to their system via your normal link or another route and absolutely NOT through any link in the email you've just received. Chances are, though, you are needlessly worrying - millions of false emails go out every day.
(written 2006-09-09, updated 2006-09-10)

Commentator	says ...
Bruce James:	The clues in the 'Dear Paypal Member' bit.. Real paypal would know your name, surely? (comment added 2006-09-11 14:47:51)

G910 - Well House Consultants - Scams
  [78] Domain Registry of America - (2004-10-07)
  [178] Calling a spade a spade - (2005-01-15)
  [347] Frightening and from-friend viruses and spams - (2005-06-14)
  [1313] Tratum Technologies - (2007-08-21)
  [1342] Google, wwmdirectory, Freshwater, ATP - new scam? - (2007-09-09)
  [1680] Astroturfing - the online definition - (2008-06-17)
  [1772] Ken Palm, iTime, and Domain Name Tasting - (2008-08-25)
  [1795] What have iTime, honeytrapagency and domain listing center got in common? - (2008-09-12)
  [2373] Translation from Ghanaian to English - (2009-08-23)
  [2403] Hotel Booking Scam / Cost of calls to 070 numbers - (2009-09-12)
  [2524] An update on legal changes from the FSB? - (2009-12-03)
  [2690] The World Company Register - is it another scam? - (2010-03-23)
  [2895] Global Computer Maintenance Department - (2010-07-29)
  [2988] Not mugged in London! - (2010-10-08)
  [3222] Clickjacking - another way to get you to follow a malicious link - Facebook issue - (2011-03-29)
  [3291] Pay and refund scam - alive and kicking against Melksham businesses - (2011-05-16)
  [3480] Direct Message: Really horrible blog about you ... a clever phishing trip, said to be from an MP - (2011-10-14)
  [3859] Youve Been Selected for the 2012 Edition of the Global Registry - (2012-09-16)
  [4385] A booking that looks too good to be true? It probably is too good to be true! - (2015-01-05)
  [4651] Pressure selling in the fire safety business - (2016-02-19)

Back to Put the answer in context - it may be printed

Previous and next or Horse's mouth home

Forward to Ballooning from Devizes

Add to shopping cart - NO VACANCIES sign
Double and Triple equals operator in PHP
4 weeks to go
Ballooning from Devizes
Warning - false emails, said to be from Paypal
Put the answer in context - it may be printed
From the Manor written
Strikingly busy
The train returns for a few weeks
Fitting our bathrooms