Advert.

Do NOT tell your scammer he is posted here, or report their accounts as it puts others at risk!

Phishers impersonating PayPal

DO NOT click on any links in these emails.

PayPal Security <verify@limitation.com>

Unread postby SlapHappy » Fri Apr 08, 2016 5:27 pm

* 179.50.4.133 Flycom Comunicaciones Medellín Colombia

Return-Path: <verify@limitation.com>
Received: from orangekiwimediagroep.nl (176.62.160.10.static.hosted.by.combell.com.
[176.62.160.10])
by mx.google.com with ESMTP id y9si13243738wje.220.2016.04.08.05.44.22;
Fri, 08 Apr 2016 05:44:23 -0700 (PDT)
Received-SPF: neutral (google.com: 176.62.160.10 is neither permitted nor denied
by best guess record for domain of verify@limitation.com) client-ip=176.62.160.10;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 176.62.160.10 is neither permitted nor denied by
best guess record for domain of verify@limitation.com)
smtp.mailfrom=verify@limitation.com
Date: Fri, 08 Apr 2016 05:44:23 -0700 (PDT)
Received: from 176.62.160.12 ([179.50.4.133]) by orangekiwimediagroep.nl with
MailEnable ESMTP; Fri, 8 Apr 2016 14:43:34 +0200
From: PayPal Security <verify@limitation.com>
Subject: We have limited your account



Case ID Number: PP-338-762-122-969

Dear Valued Member:
Our 24-7 monitoring security system indicates that someone could be trying to use your account without your knowledge of approval.

If your account is limited, you'll most likely be unable to send or withdraw money, and you might find that you can't accept payments or add money to the account.
It is uncertain how long it would take us to resolve the issue; it may take a few minutes or several hours depending on the problem.

PayPal have provided a form (see attachment) to verify your account. Please download & go through the form.
As a pioneer in online payments, PayPal sets the standard for fraud prevention by delivering state-of-the-art security solutions that keep your account more secure.

We apologize for the inconvenience this may have caused. We hope this issue gets resolved today.

Sincerely,
PayPal
Please do not reply to this email because we are not monitoring this inbox. To get in touch with us, you may download the attachment and follow the steps.

Attachments area
Preview attachment
DownloadAttachment.html
[HTML]
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

Support Account <update.paypal2016@mail.ru>

Unread postby SlapHappy » Mon May 09, 2016 1:44 am

* 154.106.223.202 Tunisiana n/a Tunisia

Return-Path: <econetworking@ns17.serverpy.com>
Received: from ns17.serverpy.com (ns17.serverpy.com. [162.144.117.200])
by mx.google.com with ESMTPS id fm7si9470141pad.166.2016.05.04.23.24.51
for <1xxx>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Wed, 04 May 2016 23:24:51 -0700 (PDT)
Received-SPF: pass (google.com: best guess record for domain of
econetworking@ns17.serverpy.com designates 162.144.117.200 as permitted
sender) client-ip=162.144.117.200;
Authentication-Results: mx.google.com;
spf=pass (google.com: best guess record for domain of
econetworking@ns17.serverpy.com designates 162.144.117.200 as
permitted sender) smtp.mailfrom=econetworking@ns17.serverpy.com;
dmarc=fail (p=NONE dis=NONE) header.from=mail.ru
Received: from econetworking by ns17.serverpy.com with local (Exim 4.87)
(envelope-from <econetworking@ns17.serverpy.com>)
id 1ayCiQ-0005iL-9W
for xxx; Thu, 05 May 2016 02:24:50 -0400
To: xxx
Subject: Your account access has been limited
X-PHP-Script: econetworkingagency.com/i.php for 154.106.223.202
From: Support Account <update.paypal2016@mail.ru>
MIME-Version: 1.0
Content-Type: text/html
Message-Id: <E1ayCiQ-0005iL-9W@ns17.serverpy.com>
Date: Thu, 05 May 2016 02:24:50 -0400
X-AntiAbuse: This header was added to track abuse, please include it with
any abuse report
X-AntiAbuse: Primary Hostname - ns17.serverpy.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [507 500] / [47 12]
X-AntiAbuse: Sender Address Domain - ns17.serverpy.com
X-Get-Message-Sender-Via: ns17.serverpy.com: authenticated_id:
econetworking/only user confirmed/virtual account not confirmed
X-Authenticated-Sender: ns17.serverpy.com: econetworking
X-Source: /usr/bin/php
X-Source-Args: /usr/bin/php /home/econetworking/public_html/i.php
X-Source-Dir: econetworkingagency.com:/public_html




PayPal secure ✔

Now check the account informations that belongs to you !

Why is my account access limited?
Your account access has been limited for the following reason(s):

5 Mai 2016 We need to confirm some of your account information.
Your case ID for this reason is PP-009-536-987-252.
We face a problem in the ratification of the real owner of the account . And for that you must follow the following steps :

1 Click on the Button Below

2Log In Enter email and password

3 Verify Your Informations To Activate Your Account

log In http:/ /econetworkingagency.com/sys/bin

Account Help Fees Security Apps Shop Partners Privacy
If anyone asks you for money on the Internet they are always a scammer, 100% of the time.
Blackmail Scammed? Go here: https://www.scamsurvivors.com/blackmail/#/
FAQ viewtopic.php?f=3&t=19
Victim of a scam? Go here: https://scamsurvivors.com/forum/viewtop ... =3&t=26504
User avatar
SlapHappy
Retired admin/co creator
 
Posts: 44968
Joined: Tue Apr 17, 2012 5:18 am
Location: Just a face in a magazine, watching you post your scammer's details.

Phishers impersonating PayPal

Unread postby firefly » Wed Oct 05, 2016 10:45 am

Email:

PayPal Security Team <paypal@secure.com>
To

Dear Valued Client,

Currently, your account is limited. This means that
there are certain actions that you won't be able to do in
your account such as sending, receiving, or in rare-cases
withdrawing money.

Why PayPal has limited your account?

Our security system has monitored suspicious log-in attempts
which led us to believe that an unauthorized person tried to access
your account without your knowledge. By limiting your account,
we increased layers of security for you. However, in order to
regain your access back, we'd need to hear from you.

Lift the limitations:

Please open the attachment file that we have sent.
Inside, there is a form that we need you to complete for you to
confirm your identity with us. After we have confirmed your
identity, we can then have this issue resolved, and your account
will be restored back to normal. We apologize for any inconvenience.

Sincerely,
PayPal Security Team

Attachments in this email may contain harmful content and cannot be downloaded.

Return-Path: <paypal@secure.com>
X-Originating-IP: [205.144.222.243]
Received: from 127.0.0.1 (EHLO remote.onesourcesample.com) (205.144.222.243)
Received: from 112.91.20.4 (202.29.243.220) by SBS2011.onesource.local
(192.168.100.25) with Microsoft SMTP Server id 14.3.319.2;
From: PayPal Security Team <paypal@secure.com>
Subject: Unauthorized Activity
Return-Path: paypal@secure.com

Originating IP: 202.29.243.220
Originating ISP: Uninet-th
Country of Origin: Thailand
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

personal@edition.us

Unread postby firefly » Sun May 28, 2017 7:11 pm

Email:

Dеаr valuеԁ cuѕtоmег,

Wе asκ tһat yоu taκe еχtга caгe to κеeρ уοuг аϲcount гeсoгԁѕ current.

PayРal offeгѕ а ѕeгvісe wһere іt'ѕ safе fοr реоple tο ѕenԁ anԁ rеϲeivе mоneу οnline.
Wһеn somе оf уouг іnformatiоn ɡets out-оf-dаtе, уou poѕe а гіѕк to оtһег uѕers.

Get уоur аcсоunt rеϲordѕ up-tο-date Ьу ϲоmρlеting the foгm attaϲһed in thе еmaіl. Ԝе
hаve ргovіdеd уou wіth tһе form tο sіmplіfу thе updatе ρгоceѕѕ. Ԝe һavе tο гemind уou
tһat failurе to updatе уouг аϲϲount гесоrԁѕ mаy геѕult іn аϲϲount ѕusρеnsion.

Wе аpρrеcіаtе yοur time іntο taκing this matteг seгiοuslу.

Тһank уou.

РaуPal (Suρрort Тeаm)


Form_att.html - Attachments in this email may contain harmful content and cannot be downloaded.

Return-Path: <personal@edition.us>
X-YahooFilteredBulk: 194.186.2.230
Received-SPF: none (domain of edition.us does not designate permitted sender hosts)
X-Originating-IP: [194.186.2.230]
Authentication-Results: mta1077.mail.bf1.yahoo.com from=edition.us; domainkeys=neutral (no sig); from=edition.us; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO mail.mostpay.ru) (194.186.2.230)
by mta1077.mail.bf1.yahoo.com with SMTP;
Received: from 9.250.134.220 (103.75.35.74) by mail.mostpat.ru (192.168.1.4)
with Microsoft SMTP Server id 14.3.123.3;
From: PayPal <personal@edition.us>
Subject: Update your account records
MIME-Version: 1.0
Message-ID: <4aa5f82b45809cef0febbd0a3d83cd26@CD0U6ar977666F.com>
Content-Type: multipart/mixed; boundary="fc6ca8f9c4012c35b8424d552cd494ac"
To: Undisclosed recipients:;
Return-Path: personal@edition.us

Originating IP: 103.75.35.74
Originating ISP: Elyzium Technologies Pvt. Ltd.
City: Noida
Country of Origin: India

through

Originating IP: 194.186.2.230
Originating ISP: Pvimpelcom
Country of Origin: Russian Federation
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

qttt4q2wt3@kontolskuda.com

Unread postby firefly » Wed Oct 25, 2017 6:06 pm

Email received by a potential victim who doesn't even have a PayPal account:

From: PayPal Balance Account <qttt4q2wt3@kontolskuda.com>
To: undisclosed-recipients:;
Sent: Tue, Oct 24, 2017
Subject: Notification

PayPal
Your account will be limited because we've noticed significant changes ln your account activity. As your payment processor, we need to understand these changes better.
This account Iimitation will affect your ability to:
Send or receive money
Withdraw money
Also, you won't be able to:
Remove any accounts
Remove credit cards
Close your account
What to do next
Please log in to your account and provide the requested information before october 27, 2017 through the Account Review. If we don't receive the information before this deadline or we notice additional significant changes in your account activity, your account access may be further Iimited.

Log In Now
Thank you for your understanding and cooperation. If you need further assistance, please click Contact at the bottom of any page.


Copyright © 1999-2016 Company. All rights reserved. Company (Europe) S.à r.l. et Cie, S.C.A., Société en Commandite par Actions. Registered office: 22-24 Boulevard Royal, L-2449, Luxembourg, R.C.S. Luxembourg B 118 349
Help yourself by helping others - report your scammer here.
Google can be your best friend;use it if you have doubts about someone met online. If someone met online only asks for money, no matter what reason, it´s 100% scam.
viewtopic.php?f=11&t=26504
Image
User avatar
firefly
"Nut job" admin.
 
Posts: 70956
Joined: Sun Apr 22, 2012 12:27 am
Location: in a parallel universe

david.d.apsley@manchester.ac.uk

Unread postby Wayne » Thu Jan 04, 2018 8:55 pm

Recipient email: agustevens95@live.com. See more details and remove your account limitations.
People
Service_PayPaI <david.d.apsley@manchester.ac.uk> Today at 11:55
To
Message body
Hello,

We're reviewing your case # PP-208-372-551-370.

Here are the details:


   Transaction date: Sunday, Dec 31st 2017
   Transaction ID: 3HG29710Y25501GV
   Transaction amount: 4.79 GBP
   Recipient email: agustevens55@live.com


We've asked the seller to send us more information about this transaction within 7 days.

You are not able to send or receive payments anymore.
Your PayPal account is currently LIMITED.

To see more details and remove your account limitations, log in to your PayPal account:



      PayPal Log In

Link is http://www.yilao .com /css/cetu/myppid





Thanks,

PayPal Customer Service
Click HERE for webcam blackmail/sextortion help.
Do NOT email me for sextortion help. Use the link above. If you ignore this, your message WILL be deleted.
Image
User avatar
Wayne
Site owner/"cruel and sarcastic" admin.
 
Posts: 58360
Joined: Mon Apr 16, 2012 5:13 pm

sales@glenda.com

Unread postby Wayne » Thu Jan 11, 2018 5:31 pm

*Transaction ID: 7V00887562098514D. Authorize payment to Glam Sice Da (sales@glenda.com)
Service-PayPaI-Help <myhelp@btinternet.com> Today at 12:48
To
Message body

Transaction ID: 7V00887551534514D


Hello XXXXXX

You authorized a payment of 121.00 GBP to Glam Sice Da (sales@glenda.com).

  Your funds will be transferred when the merchant processes your payment.
Any money in your PayPal account at that time will be used before any other payment source.
If you don't have any knowledge of this transaction Login here to cancel it in order to get full refund.

    * To see the full transaction details, log in to your PayPal account .

Link goes to http:/ /www.mzgqtz .com /manage/app


Merchant
Glam Sice Da
sales@glenda.com
+476152900385 Instructions to merchant
You haven't entered any instructions.

Description     Unit price     Qty     Amount
*********     121.00 GBP     1     121.00 GBP

Subtotal 121.00 GBP
Total 121.00 GBP
Payment 121.00 GBP
Payment sent to sales@glenda.com
Click HERE for webcam blackmail/sextortion help.
Do NOT email me for sextortion help. Use the link above. If you ignore this, your message WILL be deleted.
Image
User avatar
Wayne
Site owner/"cruel and sarcastic" admin.
 
Posts: 58360
Joined: Mon Apr 16, 2012 5:13 pm

Paypal PHISHING scam

Unread postby vernpalmer » Sat Feb 17, 2018 7:35 pm

Imροгtаnt: Υοuг ассοunt hаѕ Ьееn tеmрогагу Iіmіtеd untіI wе hеаг fгοm уοu.

Paypal.JPG


Text from the attachment:
services@intl.paypal.com < notification@supportantum.intl.secureaccservices.com > Today at 12:51 PM To

Pay. al
Your account has been Imited until we hear from you.
We are contacting you today as you have not updated any of your personal details for some time as a security measure we have disabled your PayPal Account.
Restore Account Please Note: Failure to restore full access can lead to permanent suspension of your PayPal Account. Sincerely, PayPal Support Team
This Automatically Generated Email, Please Do Not Reply Read Our Privacy Policy,Security and Protection If You Have Any Questions Copyright (Ci 1999-2018 PayPal All Rights Reserved.
PayPal I support J privacy policy Copyright © 2018 PayPal Pty Limited Level 11, Capital Centre United States. All rights reserved.
t Reply <4. Reply to All ■lto Forward ••• More
vernpalmer
Junior survivor
 
Posts: 66
Joined: Wed Feb 14, 2018 6:36 pm

dngl222@uky.edu

Unread postby Wayne » Sat Mar 24, 2018 12:19 am

Security Alert: Unusual Account Activity Detected
Paypal <dngl222@uky.edu> Today at 22:31
To
Recipients
Message body






Dear Customer

During our usual security enhancement protocol ,we observed multiple login attempt error while login into your Paypal Online account. We have believed that someone other than you is trying to access your account for security reasons, we have temporarily suspend your account and your access to PayPal will be restricted if you fail to Update

Link is http:// ridgecrestauto .com/ us-mmm/



Thanks,

PayPal







Help Center | Resolution Center | Security Center


Copyright © 1999-2018 PayPal, Inc. All rights reserved. PayPal is located at 2211 N. First St., San Jose, CA 95131.

PayPal PPC000458:477baa60e391e
Click HERE for webcam blackmail/sextortion help.
Do NOT email me for sextortion help. Use the link above. If you ignore this, your message WILL be deleted.
Image
User avatar
Wayne
Site owner/"cruel and sarcastic" admin.
 
Posts: 58360
Joined: Mon Apr 16, 2012 5:13 pm

sgx-noreply@wealthmsi.com

Unread postby Wayne » Sun Mar 25, 2018 10:19 pm

We declined your transaction
Paypal <sgx-noreply@wealthmsi.com> Today at 19:18
To
Message body

We declined your transaction
Dear Customer,

As you know, your transaction was recently declined. What you may not know is that it was because somebody used your Paypal account.Let’s make sure it doesn’t happen again. For your safety, we must confirm you are indeed the cardholder to prevent fraud.

Confirm account - link is https:// elki56. ru/js/us/verif/

It`s about protecting your identity. Just so you know, Paypal sends out an email whenever someone adds or changes a rescue email address associated with an existing Paypal account. If you received this email in error, don`t worry. It`s likely someone just mistyped their own email address when creating a new Paypal account.


Yours sincerely,
PayPal

Please do not reply to this email because we are not monitoring this inbox. To get in touch with us, log in to your account and click "Contact Us" at the bottom of any page.

Copyright © 1999-2015 PayPal. All rights reserved.

PayPal (Europe) S.а r.l. et Cie, S.C.A.
Sociйtй en Commandite par Actions
Registered office: 22-24 Boulevard Royal, L-2449 Luxemburg
RCS Luxemburg B 118 349
Click HERE for webcam blackmail/sextortion help.
Do NOT email me for sextortion help. Use the link above. If you ignore this, your message WILL be deleted.
Image
User avatar
Wayne
Site owner/"cruel and sarcastic" admin.
 
Posts: 58360
Joined: Mon Apr 16, 2012 5:13 pm

PreviousNext

Return to No clicky clicky. Sites that try to install a virus on your PC.

Who is online

Users browsing this forum: No registered users and 8 guests