Database Info

FRAUD PAYPAL EMAIL SAMPLE: BE CAREFUL !!!!!

I have a Paypal account and I buy a lot of stuff from eBay. My account is connected to my Yahoo email; it used to be with my office email but sometimes our firewall treats Paypal emails as spam.
Anyway, I checked my Yahoo account yesterday and there was a notice that I sent payment of 395.85USD to someone for buying an Omega Constellation Watch (must've been a fake watch that one ). Scrolling down the message there was an area which asked if this transaction is not authorized; I should click on the Problem Resolution Center. I clicked on it and the website appeared which definitely looked like Paypal. It asked me to log in; which I did. The next step was that it asked for my First Name, Last Name, Credit Card info, etc. This actually struck me as being strange. Since I had a Paypal account, logging in automatically tells the website who I am and what my personal details are.
What I did was immediately logged out. I then logged in again and changed my password and secret question (when you forget your password this one prompts you). Logged out again, then logged in and checked my history or activity. It showed that there was no purchase done on the said date (when I supposedly bought a watch). I forwarded the suspect email to: 'sp[email protected]' for them to clarify and investigate for me. I also checked with my credit card company and thankfully they said that there was no activity related to the case I described.
This morning I checked my Yahoo email and Paypal responded saying that they have verified the email to be a fake. The first point is that Paypal will never address you as "Dear Member or Dear Paypal Member". The second point is that there was a difference in the URL used by the fraud link. For those of you who use Paypal; please take some time off and read a little more on this. There's a "Contact Us" section, from there you can type "Fraud" in the search field. A topic saying "How do I differentiate between a fake and authentic email from Paypal" (or something like that).
Lastly, Paypal said that if I did fill out the information requested by the fraud URL; chances are my credit card info would have been obtained and who knows what can happen. I'm sending you a copy of the email I received. PLEASE TREAT THIS AS REFERENCE ONLY. DO NOT COPY OR CLICK ON ANY LINKS.
Cheers
Rob
------------------------------------------------------------------------
--------------------------------------------------------------------------
PayPal <[email protected]>" <[email protected]> Add to Address Book Add Mobile Alert
Subject:
Your payment has been sent to [email protected]
Date:
Tue, 10 Jan 2006 20:20:01 -0700
Dear PayPal Member,
This email confirms that you have paid OMEGAMOVE ([email protected]) $395.85 USD using PayPal.
This credit card transaction will appear on your bill as "PAYPAL OMEGAMOVE".
--------------------------------------------------------------------------------
PayPal Shopping Cart Contents
Item Name:
Omega Constellation Men Watch - mint
Quantity:
1
Total:
$380.85 USD
Cart Subtotal:
$380.85 USD
Sales Tax:
$15.00 USD
Cart Total:
$395.85 USD
--------------------------------------------------------------------------------
Shipping Information
Shipping Info:
James Dickinson
184 Hadley Dr.
Chicago, IL 60614
United States
Address Status:
Unconfirmed
--------------------------------------------------------------------------------
If you haven't authorized this charge, click the link below to cancel the payment and get a full refund.
Dispute Transaction
--------------------------------------------------------------------------------
Thank you for using PayPal!
The PayPal Team

First: check on which domain you are checked.
Most fraud email don't link to real sites.
However: you see good link for example http://www.paypal.com/authorize.html in email, but when you hover over the link, below your good email client you can see real link in status bar, for example http://paypal.proof.nu/auth/login.php or so. Or strange ipnumber http://12.31.78.2/paypal/auth.html.
(links are not real - just for example, no need to clicking!!!!)
Yes, don't look blindly on words on the email. Look always behind the emails: which real links are here used? Is there not extra words used, is grammar okay, and looks altijd first on official sites if there is indeed happens. If there is indeed such information available then you can look further. If there is warning about fake emails, trash the email immediately or forward to paypal site for examining fraud links.
Such strange links are not linked to www.paypal.com. That is why you must always check the real links where you going to.
And when the fraud email links real to www.paypal.com site, then is fraud email useless.
Full image fraud emails are almost fake. You can always trash them.

Similar thing happened to me with an Amazon spoof site. Of course, the email was in HTML and the link redirected me to another site that asked me to sign in and then give credit card details. It looked very convincing indeed. This was the first time I'd ever received such a thing and it nearly caught me off guard but luckily I realised at the last moment that it was illegal 'phishing' activity. I'm not sure who to report this to though, Amazon, or a more authorative body like the police? See the attached images for what the site/email looked like.
Regards,
Neil.

thanks for the info

PayPal Example
mrdummy - You had some great points.
I just came across an interesting example of a PayPal fraud email.
The email had this from header...
"From: [email protected] ([email protected]) "
If you look at the domain name... [email protected] "ACCOUNTS-PAYPAL.COM", you can see that it's not from paypal.com. That's the best way to determine whether or not it's spam email.
GMail does a great job of helping you determine this. This email wouldn't have even showed up in your spam box since GMail wouldn't have accepted it because it's claiming to be from "paypal.com" and it's actually from "accounts-paypal.com".
Other good email fraud tips.
GMail will also put a little key next to the sender's name if it is a legitamate email... atleast in PayPal's case.

Anonymous Caller? New Service Says, Not Any More

Anonymous Caller? New Service Says, Not Any More
By Kevin Poulsen February 16, 2009 | 11:43:10 PM
Categories: Hacks and Cracks
A new service set for launch Tuesday allows cellphone users to unmask the Caller ID on blocked incoming calls, obtaining the phone number, and in some cases the name and address, of the no-longer-anonymous caller.
The service, called TrapCall, is offered by New Jersey's TelTech systems, the company behind the controversial SpoofCard Caller ID spoofing service. The new service is likely to be even more controversial — and popular.
"What’s really interesting is that they’ve totally taken the privacy out of Caller ID," says former hacker Kevin Mitnick, who alpha-tested the service.
TrapCall's basic unmasking service is free, and includes the option of blacklisting unwanted callers by phone number. It also allows you to listen to your voicemail over the web. It's currently available to AT&T and T-Mobile subscribers, with support for the other major carriers due within weeks, says TelTech president Meir Cohen.
"It’s not meant for spies, it’s not meant for geeks, it’s not meant for any specific target audience,” Cohen says. "Everybody hates getting blocked calls, and in this day and age they want to know who’s calling, and they want the option of taking the call or not."
Consumers have had the option of shielding their number from display since Caller ID was introduced in the early 1990s, either by dialing *-6-7 before placing a call, or asking their carrier for blanket anonymity for their line. But TrapCall takes advantage of a loophole in Caller ID blocking that’s long benefited corporate phone customers: Namely, calls to toll-free numbers are not blocked, because those calls are paid for by the recipient.
TrapCall instructs new customers to reprogram their cellphones to send all rejected, missed and unanswered calls to TrapCall’s own toll-free number. If the user sees an incoming call with Caller ID blocked, he just presses the button on the phone that would normally send it to voicemail. The call invisibly loops through TelTech’s system, then back to the user’s phone, this time with the caller’s number displayed as the Caller ID.
The caller hears only ringing during this rerouting, which took about six seconds in Wired.com's test with an iPhone on AT&T. Rejecting the call a second time, or failing to answer it, sends it to the user’s standard voicemail.
The service comes as bad news to advocates for domestic violence victims, who fought hard to make free blocking an option in the early days of Caller ID. "I have huge concerns about that,” says Cindy Southworth, director of technology at the National Network to End Domestic Violence, in Washington, D.C. Southworth fears that abusers will use the new service to locate partners fleeing a violent relationship.
In a notable case in 1995, a Texas man named Kevin Roberson shot his ex-girlfriend to death after locating her through the Caller ID device on her roommate's phone line.
The problem is serious, because domestic violence victims who've fled an abusive relationship often have to stay in contact with their abuser by phone, particularly in situations where the former couple share custody of their children,” Southworth says.
"The judge will require that the victim contact the offender to discuss where they’re dropping the children off, for example," says Southworth. "And there’s often court-mandated phone contact between the abusive partner and the victim." In those cases the victims often rely on Caller ID blocking to keep their former partner from knowing where they’re living.
Cohen dismisses that concern, arguing that Caller ID blocking was never secure to begin with. "It’s very simple for somebody to forward a phone to an 800 number in their office, and right there, they’re picking up the phone number of the person who is calling," he says. At least now the false illusion of Caller ID privacy will be dispelled by TrapCall, he adds.
In addition to the free service, branded Fly Trap, a $10-per-month upgrade called Mouse Trap provides human-created transcripts of voicemail messages, and in some cases uses text messaging to send you the name of the caller — information not normally available to wireless customers. Mouse Trap will also send you text messages with the numbers of people who call while your phone was powered off, even if they don’t leave a message.
With the $25-a-month Bear Trap upgrade, you can also automatically record your incoming calls, and get text messages with the billing name and street address of some of your callers, which TelTech says is derived from commercial databases.
TelTech is no stranger to controversy. Its Spoofcard product lets customers send any phone number they want as their Caller ID. Among other things, the spoofing service has been used by thieves to activate stolen credit cards, by hackers to access celebrities’ voicemail boxes, and by telephone hoaxsters to stage a dangerous prank called "swatting," in which they spoof an enemy’s phone number while calling the police with a fake hostage situation. The goal of swatting — realized in hundreds of cases around the country — is to send armed cops bursting into the victim's home.
Cohen’s company has cooperated in law enforcement investigations of Spoofcard abuse, which have led to several prosecutions and convictions. Despite the spoofing-linked crimes, he insists that most Spoofcard users are just privacy-conscious consumers, including celebrities, government officials, private investigators and even spousal abuse victims and shelters.
He also expects his new business will be good for his old one.
“The only way to block your number after this is released is to use Spoofcard,” he says with a laugh.
© 2008 CondéNet, Inc. All rights reserved.

[App] Mobile bank (SMS-banking)

"Mobile bank"
current version: 1.2.12
SMS-banking, information on the status of their card accounts and performed transactions, payments using your phone.
Anndroid: 1.5 and above
Available on Android Market
SMS Banking - Is designed for performing balance checks, account transactions, payments, credit applications etc. via a mobile device such as a mobile phone using the SMS service.
How does it work?
If you are a user of SMS banking, every time you make a payment using your credit or debit card (or withdraw cash from an ATM), you will receive an SMS notificaton message, which shows: the transaction amount, transaction location, remaining balance and other additional information.
The application converts this information into readable format, which lets you view the history of activity on a card.
Additional features:
• Mini-statements and checking of account history;
• Mutual funds / equity statements;
• Status on cheque, stop payment on cheque;
• Account Balance status;
• Recent transactions;
• Blocking of (lost, stolen) cards;
• Additional features depend on the list of services provided by your bank.
• Configuration templates of operations performed on the card (Payments, Deposits, Withdrawals, and Transfers)
In addition you can view maps showing the location of transactions, as well as the location of your nearest ATM.
Unfortunately, the application ONLY supports Russian banks and Russian representative offices of foreign banks. This is more than 30 banks. The program has been successfully operating for over a year.
Want to see the program support your bank? You can help, we require:
1. Provision for the analysis of several SMS notifications received from the Bank, the more messages, the higher the accuracy of the parser. Messages can be downloaded directly from the program, see the menu 'Unload SMS to a file', messages are stored in the file /sdcard/MobileBank/exportSms.txt
----------------------------------
Before sending confidential information may change, but does not replace the scrip for XXX - better to replace it with the other figures, because separators are important to know the amounts, if any. All special characters, spaces, etc. are also important.
----------------------------------
2. Provide a link to the website of the Bank, to the page listing its banking services.
Is it safe? Yes! The text of the SMS notification does NOT receive full credit card number or PIN.
Attention! Nowhere in the program is the user required to enter a full credit card number, PIN, or CVV codes. Be careful not to communicate this information to anyone.

Provide a link to the website of the Bank, to the page listing its banking services.
Click to expand...
Click to collapse
belarusbank.by/ru/person/cards/uslugi/sms-banking

Supply kind of accessories

Hi , anyone can contact me if u wanna distribute or wholesale mobile phone accessories in any where's, I'm a purchaser in china market.
Try to contact me for more detail
Tel: +86 1500 2000 933
E-mail : [email protected]
Wechat ID : rydentan
Whatsapp: +60194434314

Sambd.org

Is Sambd.org a reliable business?
Last Saturday I've payed by iDeal an amount of 4 euro to be able to download drivers quickly.
I thought this was a one-time-payment.
But this morning I received an e-mail from Sambd.org with the text:
"Your access to the premium membership will expire: 14.06.2020
Subscription will continue automatically.
You can unsubscribe in the profile settings."
But in the profile settings is no possibility to unsubscribe.
Sambd does not reply on e-mails.
I don't trust this.
How can I cancel the recurring payment via iDeal and block Sambd.org for future payments?
Thank you for help.

sellh1 said:
Is Sambd.org a reliable business?
Last Saturday I've payed by iDeal an amount of 4 euro to be able to download drivers quickly.
I thought this was a one-time-payment.
But this morning I received an e-mail from Sambd.org with the text:
"Your access to the premium membership will expire: 14.06.2020
Subscription will continue automatically.
You can unsubscribe in the profile settings."
But in the profile settings is no possibility to unsubscribe.
Sambd does not reply on e-mails.
I don't trust this.
How can I cancel the recurring payment via iDeal and block Sambd.org for future payments?
Thank you for help.
Click to expand...
Click to collapse
Here's what is written on the website:
If you have any questions or difficulties related to accessing the site or using a premium account, please contact us via e-mail:
[email protected]
You should not enter your credit card info on a website you don't trust. Scammer often use Credit Card as payment because it's not refundable (as well as bitcoins and Western Union). When you pay on internet use services like PayPal that has a clear policy on when to get a refund. IDK if this website is trustworthy, but I hope for you.