Paypal Take Action
[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
VERY IMPORTANT INFORMATION, READ THIS FIRST: The example and associated information published on this page are subject to the SHPAMEE Terms Of Use. Please familiarise yourself with these terms before viewing or using any information on this page.
Header:
X-Account-Key: account8
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-Apparently-To: x
X-YahooFilteredBulk: 216.105.82.1
Received-SPF: pass (domain of gamblingcity.com designates 216.105.82.1 as permitted sender)
X-YMailISG: x
X-Originating-IP: [216.105.82.1]
Authentication-Results: mta1169.mail.ir2.yahoo.com from=em.pp.co.uk; domainkeys=neutral (no sig); from=em.pp.co.uk;
dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail.GamblingCity.com) (216.105.82.1)
by mta1169.mail.ir2.yahoo.com with SMTPS; Sun, 13 Apr 2014 18:00:09 +0000
Received: from davidlonges.vpslink.com ([209.40.192.35]) by GamblingCity.com with MailEnable ESMTP; Sun, 13 Apr 2014
13:44:41 +0000
Content-Type: multipart/alternative; boundary="===============0010680599=="
MIME-Version: 1.0
Subject: [Bulk] =?utf-8?q?Take_Action?=
From: "=?utf-8?q?PayPal?=" <no-reply507yuj6c@em.pp.co.uk>
Message-ID: <x@GamblingCity.com>
Date: Sun, 13 Apr 2014 13:44:41 +0000
Received: from 46.228.37.119 (46.228.37.119) by deli10563.mail.ir2.yahoo.com(46.228.37.89); Sun, 13 Apr 2014 18:00:10
+0000
Body:
| |||||||||||
 | |||||||||||
 |
To help protect your account, no one can send money or withdraw money. In addition, no one can close your account, send refunds, remove any bank accounts, or remove credit cards. What's going on?We're concerned that someone is using your PayPal account without your knowledge. Recent activity on your account seems to have occurred from a suspicious location or under circumstances that may be different than usual.
What's next?Once you've completed all the tasks, we'll respond within 72 hours. If you need help or have any questions, call us on 0800 358 7911, 8:00 am - 10:00 pm Monday through Friday, 8:00 am - 9:00 pm Saturday 9:00 am - 9:00 pm Sunday, For Claims or limitations, hours of service are: 8:00 am - 8:30 pm Monday through Friday 8:00 am - 6:30 pm Saturday 9:00 am - 6:30 pm Sunday. Yours sincerely, | | |||||||||
 | |||||||||||
Please do not reply to this email because we are not monitoring this inbox. To get in touch with us, log in to your account and click "Contact Us" at the bottom of any page. Copyright © 2013 PayPal. All rights reserved. PayPal Email ID PP-002-658-325-389 |
Comments:
Related Cyber Criminal Profiles:
No related profiles found.Similar Spam Examples:
PayPal Phishing Scam - PayPal Alert: Security CheckpointPaypal Phishing Scam - Attention! Your PayPal Account Could Be Suspended!
Paypal Phishing Scam - Important Message
PayPal Phishing Scam - Resolution Center - Account Issues
PayPal Phishing Scam - Notification of Limited Account Access
Related Malware Samples:
No related malware samples found.[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
What activity, from where? What was purchased, how much money was withdrawn. These are all logical questions not addressed by this e-mail. The security questions should be asked in such a case, not updated.
What is a suspicious location. Someone's toilet?
This may seem very legitimate, because they are asking this info to confirm you identity. However, the only form of authentication are passwords and security questions and should only be entered on an official PayPal website, namely PayPal.com. PayPal already has all your information, why would you need to send it to them again?
This seems to be the UK telephone number for PayPal, however you should never use any information from a suspicious e-mail. Always get the number of the organisation from the telephone directory or their website. You should never click on links in spam e-mails or trust any information they contain.