eBay paid item scam

I got an e-mail a few minutes ago from some scammer pretending to be eBay, claimed that some user 1bencogroup1 had already paid for an item. I have not sold anything on eBay in well over a year or two, so I don't know how in the hell anyone could have already paid for an item. These guys are scammers trying to get you to click on the link in their e-mail so they can steal your information. DO NOT CLICK LINKS in e-mails. Go open a new browser window and type in the eBay url (http://www.ebay.com) and sign in there - nowhere else, not even via link here, open a NEW browser window and enter URL manually and log in there. If you really do have any disputes you WILL see it as soon as you log in. If you don't see any notice about a dispute you can be sure the e-mail is a scam artist trying to see if they can catch you and steal your log in information.

Phishing for PayPal

These guys are on a phishing expedition and I'm not biting. Their link went to something like paylplop or something, which I did not visit of course. I sent their message to the proper authorities; PayPal's security folks at spoof@paypal.com

If you get a message from a site like PayPal never click on the link in the e-mail, open a new browser window and visit the site as you normally would. DO NOT enter the link that the e-mail would take you to.

Most sites will tell you what to do with fake e-mails. If you want to report the e-mails the site will tell you how to do that. For PayPal you forward the e-mail to spoof@paypal.com then delete the copy in your inbox, if your computer saves outgoing mail I suggest also deleting the one in your outbox as well. Just to be safe. Here is what the phishing mail I got looked like - hyperlink disabled by me.

Subject: New Message
Sender: PayPal
~~~~~~~~~~~~~~~~~~~~~~
(Image was blocked by Thunderbird filters)

You have 1 new Security Message Alert!


Please visit the Resolution Center to resolve the problem.


Thank you for using PayPal!

The PayPal Team
~~~~~~~~~~~~~~~~~~~~~~

Such eagerness, they must really need my help... or at least my identity.

These guys are desperate. I got three copies of this one right after the other. They can't wait to steal my identity.

***COMPANY ULGENT REPLY***

attention please
we are searching for reliable persons/companies whocan act as a RECEIVING PAYMENTS AGENT who will act as medium of reach between our customers and us in their area of locality.Note that, if finally aprroved as ourRepresentative, you are entitled to have 20% of whatever amount you receive from customers who are making payments for outstanding invoices on behalf of the company.If you are interested in being a REPRESENTATIVE AGENT in the abovelocation and your locality, please send your following information via E-mail:(E-mail removed by CyberCat)
mr chimfanis gage

Notice the words without spaces between them, misspellings, improper capitalization, and other signs of very poor typing - not to mention cutting from one e-mail into another.

They were also in such a hurry they forgot to include the "your following information" section of the scam they were copying.

Wait... when did I apply for that?

I have been getting a few of these e-mails. What recent application? I never applied to them. I certainly never gave them the e-mail address that this was sent to. So... exactly how did they get the idea that I would have any interest in providing them with even MORE information?

The subject on the e-mail got me too. For them to send me a RE: it implies that I sent them a e-mail titled 'about the application', do they think I am really so stupid that I don't remember if I sent one or not?

These fellows are fishing for people that are in the process of getting a loan or refinancing a mortgage and hoping they can sucker them into providing information that will allow for identity theft. Don't fall for it.


RE: about the application

Client Update:


We were able to view your credit report and recent application but still need for you to complete our finalization form.

As of today we will be able to lock your refinance in at the rate we promised, but if our finaliztion form IS NOT completed within 24 hours then the rate will come unlocked.


Please remember to confirm details on this secure form:
(URL hidden by CyberCat)


I look forward to conversing with you.


Frances Ledford
Senior Account Manager,
-Lender Alliance Office

Note: The names and companies in these scams are often legitimate and only the link in the URL, which may also look legitimate, is questionable. Please do not hold anything against any company that shows up as part of a scam e-mail. They are, quite often, just as much of a victim as the recipient of the e-mail is. I leave names in these only to make it easier for those looking for these e-mails to locate and identify the scams.

Can you be trusted?

Not long after I started this I get another scam e-mail. Apparently I am to believe that a Lady is going to trust me, someone she never even heard of before, to take her money and distribute it to the needy. Definitely a fishing e-mail looking for people that are looking to scam someone else. I am particularly amused by the apparent clip and save coupon style of these sorts of scams, I guess that maybe they must think I will print copies of it and post it to local bulletin boards for them? ::shakes head::


HOW CAN YOU HELP THE LESS PRIVILEGE WITH MY FUNDS?

MY DEAR FRIEND,

CAN YOU BE TRUSTED TO REACH OUT TO THE LESS PRIVILEGE IN YOUR LOCALITY IF YOU HAVE MY SUPPORT FINANCIALLY?

GET BACK TO ME AS SOON AS THIS EMAIL REACHES YOU. AS I WILL GIVE YOU DETAILS ON WHAT TO DO FOR ME.

YOURS SINCERELY,
LADY TORETH HUGHES
My contact email: (e-mail withheld by CyberCat)

.................................................................................................................

MY DEAR FRIEND,

CAN YOU BE TRUSTED TO REACH OUT TO THE LESS PRIVILEGE IN YOUR LOCALITY IF YOU HAVE MY SUPPORT FINANCIALLY?

GET BACK TO ME AS SOON AS THIS EMAIL REACHES YOU. AS I WILL GIVE YOU DETAILS ON WHAT TO DO FOR ME.

YOURS SINCERELY,
LADY TORETH HUGHES
My contact email: (e-mail withheld by CyberCat)

......................................................................................................................

MY DEAR FRIEND,

CAN YOU BE TRUSTED TO REACH OUT TO THE LESS PRIVILEGE IN YOUR LOCALITY IF YOU HAVE MY SUPPORT FINANCIALLY?

GET BACK TO ME AS SOON AS THIS EMAIL REACHES YOU. AS I WILL GIVE YOU DETAILS ON WHAT TO DO FOR ME.

YOURS SINCERELY,
LADY TORETH HUGHES
My contact email: (e-mail withheld by CyberCat)

Because of the need to remove certain portions of e-mails, such as URLs and e-mail addresses, I have decide to let the stealthy little CyberCat loose to make editing swipes of her paw and change segments. Wherever I have edited things I will note that something was withheld by the CyberCat.

A little Googling for Lady Toreth Hughes will bring up multiple discussions of scams by this persona.