FA+
Shop
1055
Views
Views
3
Favorites
Favorites
Category
All / Miscellaneous
Species Unspecified / Any
Size 1280 x 413
File Size 95.7 kB
Report this content
★
More from NachT
If you get a message like I got and click on it, it goes to a non-PayPal site. Posting this to let you all know, as many of the members here use PayPal and this is a security risk to it's member's livelihoods potentially.
I would really appreciate if the administration would keep this up, at least for a bit to let it's users know about this sort of stuff. I'm not releasing any personal information, this is all fake info, but you should ALL be wary of such things. Use a fake password to get into their fake PayPal account too, and then change your own real one.
Stay safe out there you beautiful bastards.
-Nightie-
I would really appreciate if the administration would keep this up, at least for a bit to let it's users know about this sort of stuff. I'm not releasing any personal information, this is all fake info, but you should ALL be wary of such things. Use a fake password to get into their fake PayPal account too, and then change your own real one.
Stay safe out there you beautiful bastards.
-Nightie-
Category All / Miscellaneous
Species Unspecified / Any
Size 1280 x 413px
File Size 95.7 kB
Yeah dude I had MULTIPLE of those too, best way to check is look at the url behind the fake email address. Proper emails come from .paypal.com the service[at]paypal.com is just a fascia the real fake email is a burner which you can see starts with sfwetj... so just make sure to carefully check your emails to see where they are coming from.
I get these at least once a week on average, and also look for bad spelling too.
I get these at least once a week on average, and also look for bad spelling too.
I get these a ton, luckily they are easy to spot for me as they are all in english while official paypal messages to me are in german.
If you get one report it to Spoof[at]paypal.com
If you get one report it to Spoof[at]paypal.com
Yeah, the closer we get to the Holidays, the more spoofing-mails will be sent out by those malicious actors. This includes supposed Amazon e-mails which claim that you need to act fast or your account is getting suspended.
If you get a fake e-mail that tries to seem like it's from Amazon, you can send that one to stop-spoofing[at]amazon.com - regardless which Amazon-locale you use. So even if you use Amazon.co.uk, forward the mail to the above-mentioned Amazon.com e-mail.
If you're unsure about an Amazon e-mail sent to you being genuine or not, do check your Amazon-account by going to your local Amazon web-address (such as Amazon.de if you use the German one, etc.), log in if needed, go to "Your account" and then check the "Message Center".
Official Amazon-mails always save a master-copy inside this Message Center. So any mail you actually get from Amazon will be found in there. If the supposed Amazon e-mail isn't found in there, then it's fake.
If you get a fake e-mail that tries to seem like it's from Amazon, you can send that one to stop-spoofing[at]amazon.com - regardless which Amazon-locale you use. So even if you use Amazon.co.uk, forward the mail to the above-mentioned Amazon.com e-mail.
If you're unsure about an Amazon e-mail sent to you being genuine or not, do check your Amazon-account by going to your local Amazon web-address (such as Amazon.de if you use the German one, etc.), log in if needed, go to "Your account" and then check the "Message Center".
Official Amazon-mails always save a master-copy inside this Message Center. So any mail you actually get from Amazon will be found in there. If the supposed Amazon e-mail isn't found in there, then it's fake.
Ye, it's one of those features barely anyone knows about unless they're either told about it or they look at everything in their account.
I know about it since I work for German Amazon, and this is what we use officially in our documentation to inform people about what to do with spoofer-mail.
I know about it since I work for German Amazon, and this is what we use officially in our documentation to inform people about what to do with spoofer-mail.
Yeah, these are a thing that come up every few months for some people.
The easy way to recognize them as fake yourself is "Do they have my name anywhere in them?"
If they don't they're fake.
Paypal themselves have an e-mail address you can forward these to for verification of the legitimacy. It's spoof[at]paypal.com
If you're able to recognize them on your own quickly, you can skip forwarding them to paypal for verification and just delete them. If you're not sure, forward them (as attachment if your e-mail program allows it).
If you use gmail as your primary email provider, they tend to end up being automatically dumped into your spam folder. Outlook/hotmail is hit or miss.
Just a few things to also help keep people safe
The easy way to recognize them as fake yourself is "Do they have my name anywhere in them?"
If they don't they're fake.
Paypal themselves have an e-mail address you can forward these to for verification of the legitimacy. It's spoof[at]paypal.com
If you're able to recognize them on your own quickly, you can skip forwarding them to paypal for verification and just delete them. If you're not sure, forward them (as attachment if your e-mail program allows it).
If you use gmail as your primary email provider, they tend to end up being automatically dumped into your spam folder. Outlook/hotmail is hit or miss.
Just a few things to also help keep people safe
Actually there was a buncha accounts they limited as of October 8th, mine being one of them. Apparently ANY transactions were pinging accounts and they limited a whole ton. Turns out it was some error in their system. XD But yes in that case it was actually sent to my name from paypal. Fake ones I've found always go to "insert email address here" instead of my real name. XD
Scammers are not the only ones that use Paypal.
ANY big bank has had scammers. Here's a few tips on how to avoid any scam.
1.) ALWAYS check the domain of the website or the email. It may be something like paypal . com-i . info or something like that. You want to discard everything but the last two segements before a /. In this case, it's com-i . info, and that is always telling.
On Gmail, in your example, look at the email in grey, not in black. The Grey will ALWAYS tell you the email address, whereas the black is the "display name" for the email address. In your case, the email came from a .club domain, so that's also telling it's not Paypal.
2.) Do not click any links in the email. There is a thing such as drive-by downloads which can download viruses/malware that can install trojan horses. It doesn't matter if you're using Firefox, Chrome, Opera, or any of the other browsers (more than likely, it's based off the same code as Chrome, even Microsoft's updated Edge (with the wave e logo) uses the same codebase as Chrome), a virus can be downloaded and activated.
3.) Go to the actual site yourself. What I mean in this, is, using that example, open a new tab and go to paypal.com, log in there, and find out. Most places will actually tell you when you log in if there's something wrong with your account on the landing page after logging in.
4.) ALWAYS USE MULTI-FACTOR AUTHENTICATION. This can also be called One-time passcode (OTP) or 2 factor authentication (2FA). Doesn't matter if it's a game account or a bank account. If they offer it, use it. Paypal offers it in multiple flavors, including using text messages and google authenticator. I use Authy to handle it, so when I move phones, my account comes with, and I don't have to set it up again, and is compatible with Google Authenticator's system. It does require having a smartphone to use Authy, but it works!
Thank-you and continue to practice safe hex from here on.
ANY big bank has had scammers. Here's a few tips on how to avoid any scam.
1.) ALWAYS check the domain of the website or the email. It may be something like paypal . com-i . info or something like that. You want to discard everything but the last two segements before a /. In this case, it's com-i . info, and that is always telling.
On Gmail, in your example, look at the email in grey, not in black. The Grey will ALWAYS tell you the email address, whereas the black is the "display name" for the email address. In your case, the email came from a .club domain, so that's also telling it's not Paypal.
2.) Do not click any links in the email. There is a thing such as drive-by downloads which can download viruses/malware that can install trojan horses. It doesn't matter if you're using Firefox, Chrome, Opera, or any of the other browsers (more than likely, it's based off the same code as Chrome, even Microsoft's updated Edge (with the wave e logo) uses the same codebase as Chrome), a virus can be downloaded and activated.
3.) Go to the actual site yourself. What I mean in this, is, using that example, open a new tab and go to paypal.com, log in there, and find out. Most places will actually tell you when you log in if there's something wrong with your account on the landing page after logging in.
4.) ALWAYS USE MULTI-FACTOR AUTHENTICATION. This can also be called One-time passcode (OTP) or 2 factor authentication (2FA). Doesn't matter if it's a game account or a bank account. If they offer it, use it. Paypal offers it in multiple flavors, including using text messages and google authenticator. I use Authy to handle it, so when I move phones, my account comes with, and I don't have to set it up again, and is compatible with Google Authenticator's system. It does require having a smartphone to use Authy, but it works!
Thank-you and continue to practice safe hex from here on.
And as far as Game accounts are concerned, some places require you to download their app and/or purchase their key. I will notate that in the following list.
Here are the known OTP/2FA/MFA game stores that use it: Blizzard (Own app/hardware key), Steam (Own app, but is the easiest to transfer over), Epic Game Store (Uses Google Auth, SMS, or Email), EA Origin (called Login Verification, uses Google Auth), Microsoft/Xbox (Own app which the app itself can be used for Google Auth systems, and yes, you can use your old consoles with it on, requires the use of App passwords, which bind the password to the specific console, and can't be used elsewhere), Square-Enix (Own app).
Most modern MMORPGs do use Multi-Factor Authentication in one form or another, for this exact reason. There's Phishing scams out there.
Here are the known OTP/2FA/MFA game stores that use it: Blizzard (Own app/hardware key), Steam (Own app, but is the easiest to transfer over), Epic Game Store (Uses Google Auth, SMS, or Email), EA Origin (called Login Verification, uses Google Auth), Microsoft/Xbox (Own app which the app itself can be used for Google Auth systems, and yes, you can use your old consoles with it on, requires the use of App passwords, which bind the password to the specific console, and can't be used elsewhere), Square-Enix (Own app).
Most modern MMORPGs do use Multi-Factor Authentication in one form or another, for this exact reason. There's Phishing scams out there.
Also, forgot to mention non-gaming sites. Most email (see Microsoft and Google) also offer MFA. Google goes one step further, by using any Android or Google Wear device as the authenticator itself when you log into your Google account. Most Banks and payment processors such as Paypal do use MFA. Some web hosts also use MFA. Facebook and other social media websites use MFA. Hell, some workplaces use it. Amazon uses it, Discord, Dropbox, Slack, Twitch...they all use MFA.
Never click on the link in the first place, this will give them your valid IP address to ether spoof, hijack, port scan or DoS attack. The long email address from is a dead givaway. You will need to unplug your modem for 16 seconds and let it power cycle for a new IP address (dynamic), or however you connect, or use a VPN.
If you suspect an issue, the paypal website, not the one linked in those emails lol, will have info or show you what is going on with yer account. I have the app on my phone and opted out of email notifications for that reason. The app is generally faster notifying me of anything anyway. Plus I think they stopped limiting accounts a long time ago. Now if there is an issue, they just freeze the whole account. Which can be bad if there is a major issue as they can and will put a freeze on the linked bank account too. Has happened to me in the past, and it took days for them to figure it out and let me use my bank account again. I dont have paypal tied to my primary account anymore for that reason. I have been left more than a week, unable to access my account or the DD paycheck of that week because of some purchaser troll, trying to scam my account.
I tend not to be able to let money just sit in a bank, collecting very little interest. I pull it out, and put it into silver (up nearly $6 per ounce this year alone!), gold, and ammo (try to find 9MM ammo that isn't marked up nearly $8 a box).
Worth it's weight after the upcoming financial collapse hits :)
Worth it's weight after the upcoming financial collapse hits :)
'Was in the same boat for over a decade, but after years of hard work, thrifty spending + investing what was possible, and good decisions (mostly by my wife, thankfully), we bought a super cheap fixer-upper (~70K 1/4 acre with a broken house with no plumbing and glitched wiring) and spent years of hard work fixing it up, including remodeling a garage into a rental so a friend could move out of an expensive apartment and live with us for half the price he was paying, and paying a chunk of the mortgage for us.
Then, after reading the housing bubble and waiting for the economy to balance in our favor with that bubble, we made nearly double of what we put into it ($160K, minus probably $3K in repair we paid for ) and moved to a super cheap rural district with less crime, dumped a bunch of money into silver and gold, and the worth of the savings has gone up probably around 30% instead of a bank's 0.8%, and still rising.
It wasn't an easy journey, and required long nights of hard work through repairs, risk v value assessment, timing, studying and some nights of tightening the belt and going without food when repairs on the rental were needed.
Risk V Reward is a really hard gamble to take.
Then, after reading the housing bubble and waiting for the economy to balance in our favor with that bubble, we made nearly double of what we put into it ($160K, minus probably $3K in repair we paid for ) and moved to a super cheap rural district with less crime, dumped a bunch of money into silver and gold, and the worth of the savings has gone up probably around 30% instead of a bank's 0.8%, and still rising.
It wasn't an easy journey, and required long nights of hard work through repairs, risk v value assessment, timing, studying and some nights of tightening the belt and going without food when repairs on the rental were needed.
Risk V Reward is a really hard gamble to take.
Comments