Weird email from PayPal, scam?

[karokari]

Dear XXXXXXXX@hotmail.com
,


We recently noticed one or more attempts to log in to your PayPal account
from a different IP address.


If you recently accessed your account while traveling, the unusual log in
attempts may have been initiated by you. However, if you did not initiate
the log ins, please visit PayPal as soon as possible to check-up your
account information:



http://www.paypal.com/cgi-bin/webscr?cmd=_login-run


Thanks for your patience.


Sincerely,
PayPal


----------------------------------------------------------------


Please do not reply to this e-mail. Mail sent to this address cannot be
answered.

Edit: This came from Service@paypal.com


As im retared I clicked the URL. So was this just some virus email, since I for sure havent tried to log in to my PayPal account(didint even know I have one)

[edfurlong]

Looks legit to me, but if you dont have an account I dont know. I would call them on one of those telephones I hear so much about if you are concerned.

[judgesmails]

Since you don't have a PayPal account, I think it is likely a scam email. When you hit on the link it is probable the site installed spyware or a keylogger on your machine. Never click on a link sent to you through email.

Run a spyware sweep with Ad-aware or equivalent (or better) and install Process Guard and/or Advnaced Anti Keylogger from spydex.com. You may want to change all your passwords as well.

[karokari]

I use firefox, zone alarm and f-secure, should I still be worried? But I will anyway run the ad-aware now..

[Reef]

There was just a thread about a ongoing paypal scam somewhere

[kurosh]

check the headers

[Reef]

[ QUOTE ]
check the headers

[/ QUOTE ]

some of the scam sites have a paypal like url

[TobDog]

forward it to spoof@paypal.com smae with ebay stuff like that. If you dont have an account, you should be verifying your info? NO!. ebay and paypal have been getting hit hard with spoofs like this, they say to always use your browser or favorites to go to their site, never click on a link.

[karokari]

Mailed the actual paypal and got this back:
Dear XXX XXXXXXXX,

Thank you for contacting PayPal.

We appreciate you bringing this suspicious email to our attention. We
can confirm that the email you received was not sent to you by PayPal.
The website linked to this email is not a registered URL authorized or
used by PayPal. We are currently investigating this incident fully.
Please do not enter any personal or financial information into this
website.

If you have surrendered any personal or financial information to this
fraudulent website, you should immediately log into your PayPal Account
and change your password and secret question and answer information. Any
compromised financial information should be reported to the appropriate
parties.

If you notice any unauthorized activity associated with your PayPal
transaction history, please immediately report this to PayPal by
following the instructions below:

1. Log in to your account at https://www.paypal.com/ by entering
your email address and password into the Member Log In box

2. Click on Security Center at the bottom of the page

3. Click on the 'Unauthorized Transaction' link under the Report a
Problem column

4. Please follow the instructions in order to access the appropriate
form

If you have any further questions, please feel free to contact us again.

Sincerely,
PayPal Account Review Department


************************************************** **********************
This
email is sent to you by the contracting entity to your User Agreement,
either PayPal Inc or PayPal (Europe) Limited. PayPal(Europe) Limited is
authorized and regulated by the Financial Services Authority in the UK
as an electronic money institution.
************************************************** *********************
PayPal and its representatives will NEVER ask you to reveal your
password. There are NO EXCEPTIONS to this policy. If anyone claiming to
work for PayPal asks for your password under any circumstances, by email
or by phone, please refuse and immediately contact us via webform at
https://www.paypal.com/wf/f=sa_pass.
************************************************** *********************







Original Message Follows:

[Tater10]

If they dont address you by name (not "Dear valued customer" or "Dear xxxxx@hotmail.com"), its a false e-mail.