Posts Tagged ‘scam’

Another scam warning – recent PayPal phishing

Tuesday, May 13th, 2008

I received a lot of positive responses (comments and email) after last week’s warning about bogus Yahoo! Lottery scams, so I thought I’d keep with that theme and offer up some more tips.

http://ymailupdates.com/blog/wp-content/uploads/2008/05/paypal-scam.pngHopefully just about everyone knows that when someone sends an “URGENT” message “from the desk of…” some guy insisting that you just lucked into a fortune, your “too good to be true” alarms should sound off.

But a well crafted phishing email can be a little harder to spot without looking for key indicators. A quick glance at my spam folder revealed two different scammers posing as PayPal, notifying me of an urgent need to click a link and verify information.

If you look at the screenshot on the right you will see that the scammer is using the updated PayPal logo, but don’t let that give you a false sense of security. The greeting gives it all away. PayPal will ALWAYS address you formally by the name registered to your account. So if you have a personal account it will be your name, and if you have a business account it will reference your business name. Never as “Dear PayPal Member” or “Account Holder”.

Now that doesn’t mean that a message addressing you correctly is guaranteed to be legit, but it does mean that a message not addressing you directly is an obvious ruse.

Once you get past the greeting, you can also look for mistakes in the copy. In the above example there is an extra period at the end of a paragraph. In the other sample there is a missing return space between paragraphs. These are small things, but a lot of scammers seem to miss them.

Also, both examples urge you to click a link to go somewhere and input information … which most reputable sites won’t ask you to do.

Remember that these aren’t tips to confirm that a message is authentic, but rather clues to easily filter out a lot of the bad ones that aren’t authentic. Ultimately your best bet is open a new window and visit the site how you normally would, and look for any alert messages there. If you have a problem with your account they will usually notify there too.

Hope this helps a little more!

http://ymailupdates.com/blog/wp-content/uploads/2007/10/blogpic.jpgRyan K.
Community Manager
Yahoo! Mail

Yahoo! Lottery notifications – don’t fall for ‘em!

Thursday, May 8th, 2008

I trust that the vast majority of you all would never fall for such an obvious ruse (notice I spelled that correctly this time), but given the number of questions I’m getting via email, as well as what many users are asking on Yahoo! Answers (more than 6,000 questions!), I think it’s worth a reminder.

If you have received a message notifying you that you have won a Yahoo! Lottery award (no matter what country it claims to be from), don’t trust it. Over on the right I have a sample of a UK & Ireland version that offers winnings of £845,000. All you have to do is reply with all of your personal information!

Keep in mind that these types of messages can come in all shapes and sizes, and be any style imaginable. So the best thing to do is look for certain red flags. Be weary wary of any message containing the following:

  • requests for sensitive account information, passwords, or bank information.
  • offers of some form of unexpected financial windfall from estates or lotteries.
  • anything that warns you not to tell anyone.

There are more, but those are some good ones to start with. If you are ever undecided about a message (some of the spammers are pretty crafty, after all) simply open a new browser and login to your account directly. If there is something important going on with your account, you should be notified when you login (this goes for most sites).

It also can’t hurt to keep an eye on the good ‘ol Yahoo! Security Site for all sorts of valuable tips to stay safe online!

http://ymailupdates.com/blog/wp-content/uploads/2007/10/blogpic.jpgRyan K.
Community Manager
Yahoo! Mail